Bitcoin PAypal Phish from Microsoft Outlook

Posted by Dave Yadallee on Tuesday, July 21. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 21 Jul 2026 11:52:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wmEcz-00000000LYT-0X0p

for dave@doctor.nl2k.ab.ca;

Tue, 21 Jul 2026 11:51:37 -0600

Resent-From: The Doctor

Resent-Date: Tue, 21 Jul 2026 11:51:36 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-westus2azlp17012020.outbound.protection.outlook.com ([40.93.10.20]:55256 helo=MW6PR02CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wmDfT-00000000FxP-3bpk

for doctor@doctor.nl2k.ab.ca;

Tue, 21 Jul 2026 10:50:19 -0600

Received: from SJ2PR07CA0022.namprd07.prod.outlook.com (2603:10b6:a03:505::24)

by BL1PPF236BDCF3E.namprd18.prod.outlook.com (2603:10b6:20f:fc04::d8d) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.245.10; Tue, 21 Jul

2026 16:49:07 +0000

Received: from SJ1PEPF00002320.namprd03.prod.outlook.com

(2603:10b6:a03:505:cafe::30) by SJ2PR07CA0022.outlook.office365.com

(2603:10b6:a03:505::24) with Microsoft SMTP Server (version=TLS1_3,

cipher=TLS_AES_256_GCM_SHA384) id 15.21.245.10 via Frontend Transport; Tue,

21 Jul 2026 16:49:06 +0000

Authentication-Results: spf=pass (sender IP is 209.85.128.72)

smtp.mailfrom=gmail.com; dkim=pass (signature was verified)

header.d=google.com;dkim=pass (signature was verified)

header.d=gmail.com;dmarc=pass action=none header.from=gmail.com;compauth=pass

reason=100

Received-SPF: Pass (protection.outlook.com: domain of gmail.com designates

209.85.128.72 as permitted sender) receiver=protection.outlook.com;

client-ip=209.85.128.72; helo=mail-wm1-f72.google.com; pr=C

Received: from mail-wm1-f72.google.com (209.85.128.72) by

SJ1PEPF00002320.mail.protection.outlook.com (10.167.242.86) with Microsoft

SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.245.5

via Frontend Transport; Tue, 21 Jul 2026 16:49:06 +0000

X-IncomingTopHeaderMarker:

OriginalChecksum:4EE003603B84F28C3288D06DBA41FBD3DE2453E2047332FFC83311487C078881;UpperCasedChecksum:732B91BD2391B68EE9587A0950E6383F36866B01F4C2A2C84966A4890DA28580;SizeAsReceived:3526;Count:15

Received: by mail-wm1-f72.google.com with SMTP id 5b1f17b1804b1-495495ad5ddso30428295e9.3

for ; Tue, 21 Jul 2026 09:49:06 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20251104; t=1784652545; x=1785257345; darn=groups.outlook.com;

h=content-type:to:from:subject:date:message-id:sender:reply-to

:mime-version:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=zP82YD2tJfS6hVlduz5PBRlCFWelRNMihZ/BefYfq1I=;

b=MdW+ZqdjG80rVjw1KFnXSpDobFaP4HGW0PIaXbzK3k5rUAdU/ttQFEHrmlT2c4hTxl

N7zSR3wGBk0ilJmC1guYioCGy1lBYzblyFuMc8kQ7W2/UUnxPRq1O09hvIdZdQ/wBUgg

N5XczEAWix3wF5vZ7EaebU1sQ8zFfQNKp6q2tUKa3EVJ3lHFl4qG4QC946rMt+a9HJ+5

Huj3YDF6LvFk1qYjVLybdSSHujD40sysniH+SwsTaUPUQXUviU2Jxm7SJqiW1ip2iUV2

IJXu4u5Gs10kbWQEv/P8g5HLPxIaseybRAgmmKyNlYcaOVMDwXUTmgIrvX6isS88QWyx

s0jQ==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1784652545; x=1785257345; darn=groups.outlook.com;

h=content-type:to:from:subject:date:message-id:sender:reply-to

:mime-version:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=zP82YD2tJfS6hVlduz5PBRlCFWelRNMihZ/BefYfq1I=;

b=deQDDsQlKCIypMG4GaupeR2dmjJhAZiNFs9nMeIK4D+/9EWg6vfCTpYQACUglUn39P

zLNW4VofmjeXwLZGwLvzrH3dYU5YTe6zbBwMghzAuhXRYGASdDU/tiykYnfARxcGzI1Z

C+LsPiljMQi/wZC4zQLt0fF+xaRIfuHFhHZxSkJ1RQPtfCTRnZZ/wWLVevWMX9NyLETH

TR2gheCUYhu5zZkpySZc7KvdylnmUPycSca46wHg7lcpDAk2q/O+9XG2ouHb5vEud2qe

BgqYN+fe0ZfJoPj9pP6ADi4tuU868hkNmkYbBFvTyKCkq6ohjodCSnuK2pxPVerpWzcj

wKTQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1784652545; x=1785257345;

h=content-type:to:from:subject:date:message-id:sender:reply-to

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=zP82YD2tJfS6hVlduz5PBRlCFWelRNMihZ/BefYfq1I=;

b=TZ7orgy1s4TRjq2il6iDGs271ahps8z2rYGBjsdB8l7jfeOGgAN4oohTh3cEVznDhH

9o3r20xlPQpKhqVu8/pdkSeJKbeLeKGVKIJ8K+yztJWECkGkto1r1aO+PCtuOyswinVS

nNDId0oVJN7X6PiET/0j6OmKhJ8RHOoIXPqg5skFK4U2LpQLrB3PyBLg3Ao4whZe1ZAE

K9XBJYRcJHejEFgqhr8SQbVhC9ro7bjAQIfZ5fgHuv3X1oJQpApFidmVSyta1xObk1eS

WtdTrrFNGjG+Ui9TLhA046P4UoVdGGAzoeWohWDr8s9EZX2XSWzN3wXEJMpYesYhRLQi

5/MA==

X-Gm-Message-State: AOJu0YziUktme/Y96vxliNPOPzPI0wh+tlDzrj+qODyoR1LcsGyxwuKd

6yzJpyEr+d3EL/IiBW7BzqhuDY1oenHKtu/YgBuT5eGCW24/ODrseCEab/8p7lgeEPk2d25aXOp

yetcLhG6Mb8CzeC0l5PLqQRS9hkT37v1xDkg=

MIME-Version: 1.0

X-Received: by 2002:a05:600c:8b16:b0:495:69eb:27fe with SMTP id

5b1f17b1804b1-49569eb28a0mr12454235e9.11.1784652545060; Tue, 21 Jul 2026

09:49:05 -0700 (PDT)

Reply-To: Haresasz Nxysarwsa

Sender: =?UTF-8?Q?Kalend=C3=A1r_Google?=

Message-ID:

Date: Tue, 21 Jul 2026 16:49:05 +0000

Subject: =?UTF-8?Q?Pozv=C3=A1nky=3A_PayPal_Payment_Confirmation_=2D_Bitcoin_Ord?=

=?UTF-8?Q?er_in_Progress_=40_ut_21=2E_j=C3=BAl_2026_=28cynthiaperez389903=40groups?=

=?UTF-8?Q?=2Eoutlook=2Ecom=29?=

From: Haresasz Nxysarwsa

To: cynthiaperez389903@groups.outlook.com

Content-Type: multipart/mixed; boundary="000000000000fef5da065721cc4e"

X-IncomingHeaderCount: 15

X-EOPAttributedMessage: 0

X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: SJ1PEPF00002320:EE_|BL1PPF236BDCF3E:EE_

X-MS-Office365-Filtering-Correlation-Id: 7a9b9b11-9d2d-42ea-fe4c-08dee747fa91

X-Sender-IP: 209.85.128.72

X-MS-Exchange-EOPDirect: true

X-SID-PRA: HARESSAZNZXRRSXAXZ321@GMAIL.COM

X-SID-Result: PASS

X-MS-Consumer-Group-Expansion-Loop: cynthiaperez389903@groups.outlook.com

X-MS-Exchange-Group-Expansion-Loop: cynthiaperez389903@groups.outlook.com

X-Microsoft-Antispam:

BCL:0;ARA:1444111002|970799063|22000799015|6092099016|16200799027|4040799016|26000799027|29080799009|3151999006|9400799043|5139299004|9020799019|26130799012|6149299003|41010799009|24102599021|32020799003|9000799056|34130799006|1680799066|18021999003|26104999009|440099028|4302099013|3412199025|21002599022;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?WXBSbmVIa1A5NTJQcmxrWHFiRE5TN055SWVIZ0Iwd2lVQjhBZWl1NUd6dDcy?=

=?utf-8?B?TXBlRmdXQ3VRcmo3ZXYzaGZtWnd3UFBDYzhaQjZuK1FiNXUxclQ2REthbVR6?=

=?utf-8?B?bFRZcTRNTE1kYkI1Q3lTa2xzTlk2TjJOZjlJUHgwZVF6YWtsakdxUmJ2Y1hs?=

=?utf-8?B?UlF0S0R5UCtBT2JMVHF6UDhlVjlWWXVWR3c0QVkwNWR6R1B4Rk9NQmZIVDlV?=

=?utf-8?B?U2x2RC9FV1VHUUJjU1Q2Yzd2QVhnYTVGMkRaanA3QWwzd1NJR0ZZNmxRRnRE?=

=?utf-8?B?MU5zOTY1M0p0N291K1JLVTFVbzB0L0docHpqelNoaG5qcE9xNGpqV3ZhcVZy?=

=?utf-8?B?MU01QldjUzZhNGFRbjRicjZSa1YydjY5L0ExNlRMQTh3MmhUTWQ1dEdHaU1z?=

=?utf-8?B?TUNqajdzM09BMUJsOC91Mk1reExtcHBXUDIzM1ZMd3Z1enNHOEpqc0gzNmlr?=

=?utf-8?B?QzlXTm9neVVsK3pvWGhIVkp6bTd1SFdzK3lDOFRMeWgvcWw4VmRaYitoZDQv?=

=?utf-8?B?L2hoNUtKdHplU0ZPSkxvb0RtT3YybHU3bDc0cm9IMGJ1ekd0aEtQTHRzMGlz?=

=?utf-8?B?RE92M1phS3ltWWxuWW1NSVZRZXQ3ZGxub2hqenpXbDRWdG41OEgvNWtPRGZH?=

=?utf-8?B?N09aZnhGSXpCZlV2bmNqcnBjVnVoQzVJQVg1OWhtZlgwSjJoalNXY1BNSUYz?=

=?utf-8?B?UE1rNk1iWDJWb0hOY0poeVNkMnIrTy8yR1E3UzRoVUVXTUlHc0VZaWZVQWd5?=

=?utf-8?B?ZHZnMm5OU1hwTndZSC9FZzBhYlp4OVdtUDdkTURITlNIUzN3QnpwYmNpa2tW?=

=?utf-8?B?d0M1eDdwUjdOTDR1WDRYeGFmWnJWRnRNbjlIZ2s1MGtBcVJ0bVZnMXFuV3pI?=

=?utf-8?B?S1FhOTZMUXd4OXZ2M3NlS3ZiK3pWT1ZnT0NXSWpTU2hzNGtXaTA4aFY2N3dk?=

=?utf-8?B?ZXJCOTFtU0JkbzU5WHZCTzVSUFAzTUI1VjFNdUdVN0psNWp6NkMzMWsxbVZk?=

=?utf-8?B?VEdFK2sxVCtIZ09MeUxySlozUlVaRVVIQjNjYll3NjBOeTlmenJTdmpTT2Yz?=

=?utf-8?B?MHdzSFNOYWxsak5sd0xoYjRua242eG1VdDM0MDdtU0JIQVU1UWxFTGJiQUFu?=

=?utf-8?B?R1ByR01tc2tuWVRicFo2eVVUK3BLSzNGWEt1bXFvRy85N0cyK25TSlkxL29x?=

=?utf-8?B?Sko0cUpVQllGMzlvd3gyRUVOcnFZSlRtVzNUSHY5UFIyYnAzTVlHL2JWUUxt?=

=?utf-8?B?eHNLRGlPL1VCVUVvdVQzeGdOWXpsa1oyL09kV0l1MDlLMUNXWlZLdW1CbE5l?=

=?utf-8?B?cEtsS3EwaU9Ha1YwSWQ1N0RQRStJdHhMWmxGYVc1YjlWdnhtTGxsc1JXUkZC?=

=?utf-8?B?QkNBN3RxcG43cjZLMkl2U2JjVlI0SGl5WlRFOUprN29CTUNSV0ZXNExUMW1r?=

=?utf-8?B?KzF6R1kvaFpKWjhmR1JkbEQ0NTNQN0dYMG5sNGd3ZU9ic2JTb1kwTHJkS0Ru?=

=?utf-8?B?Y2FJbTJINDRLNC9XQTFodXRCdGRVZWpWQ0dKb1pFNHhtbHkwQnJEK3QrWkxG?=

=?utf-8?B?VnhUd0VISk4zUkEvSHJ6MmorcStWZGp3OEY2TVpWZERIMkhuUlIvOUw2LzJr?=

=?utf-8?B?SXdEeW1KTGRleXo1NGpzK2VveGdDQXBzRzNGUmJMRmhXc2JGMGxVVzhtcjE4?=

=?utf-8?B?SnJ1TVVNUUorSGRnQnVUcnk1M04rNFdXcWdidC9hOXE3MXpnb3hPYzltTDdy?=

=?utf-8?B?UExmbHVILzltdGR6Ujk3MjNZczJuVlp5cHExYlNWdjNHREo4aEJSSkNYNUtU?=

=?utf-8?B?VXhBWVg1ckZUa01naU1SanJ1emxwbjdUTDlkanJhWFhLNlBJZC9ZYkJlQXB3?=

=?utf-8?B?MkVKNXk4NW9EWmlEWE9ERXlPWTRETlg0LzJNWXZyZmcxR3RGNHBHQVF5Um5Q?=

=?utf-8?B?b2VQaU4xODFicHFLWTlPN0pOQnYvRkx2eHNMelo0cVB0VHJUd2JxMTdJVEVP?=

=?utf-8?B?Z1RpT1VsejRqR05Sb3IrUXRrSjF3N0p5aEE1cnBGZ2Y2OStVR0ZvdWlrdVhp?=

=?utf-8?B?dkZnVE9DSDBZemVFRE4zVmxlK1hPR2dLVTRrUnk1N2dPSGxCc2VTeHI4N21R?=

=?utf-8?B?V0JzOFhYZ0ZJb3FlVWlvWjIrUVVuQW9QYWt6eG9jbndDV1h6UXhlaGxUdDBN?=

=?utf-8?B?WDIrRyt4U3puV3NtbGFmcWowUWNUMjNWU2lXQnU0YzYxbGpTNHREajYxWEM5?=

=?utf-8?B?Umd1Rm14QUJSNjhXeDRBV3Y1Sml1SHFVWk1KY29xckMyeU8yU2QrVFhPbHFN?=

=?utf-8?B?ekl5VTZRS0FUSHRSV20vekRZVldvMG1kR2lPMG1uSzNzd1RKdlJvTzJiV1Jm?=

=?utf-8?B?SmVVL3AzeldkMDdsM05Hc0lnR0VXL1ZYRTc3ZzlsOTVLUVh0cXFBdG5GbUhs?=

=?utf-8?B?ZFhyMXNTd0g0R3VTdVdYSkpSVG1kbGk1TFp5YXZ6QkZQOER6RkZSTEw4U0ZQ?=

=?utf-8?B?UnIxZFNJWWI4WmFRNXozUDJaZks4WHhjQmo0bWVwK0xmNzREUUJhQlBLWHBj?=

=?utf-8?B?WUZYNHdlRGVuNXQ1QkR2MVhwYW9NMGJwNjI3bzBKaG9MMzlsdjF6OFlkREJD?=

=?utf-8?B?Ry9FY0hRS2RldWo4VUFCSlhwbXlqOUxqK3B2U0M2MjdmRmdFQ29HSEQ0eTZJ?=

=?utf-8?B?RWhsVXY2TERNSis0SkZnYkl4S2VCaWw0WUdyamd5bWl5UGhlUFc0RXM0U08x?=

=?utf-8?B?OVJiZUUyNzUzMm1waDEweUhlUnNHWGVKUHlYVFFRTFBYWlFXNkhac0RPQ0I5?=

=?utf-8?B?ZVNrNloraVd0eFg5Z0hLYUN5WGFzcUxCL2lybzl1ZXBTNHNRUEdIMml5RklY?=

=?utf-8?B?UVlZQldXMEdwbklmcXB0c1ljVlh2c1JaZnhaL1dHSkxhOThSSWp5OVBUZUd5?=

=?utf-8?B?ZmI0NmRDVHZoNFFJYVYrazkyZFZHNUNGQXpyUCtWTmVkSVFHQjcvaVkyY1d3?=

=?utf-8?B?THZWVmUzVDE1bFZ0TEtUbDNvTFhCeXE1RW1iTUc0dEpNTWJSN1FsUkNYUnNJ?=

=?utf-8?B?Q3p5a0xJUXd3YjExZnBCR0ZISGRYQ05WTmppSGRkeWRLbW1qemxGRjAxNVIw?=

=?utf-8?B?S21pR0tjWlFPVUtudFVBbERyZ0t2SmhpUWRiOTJEZzFSTzBvdDJ0ODRIY2ky?=

=?utf-8?B?eDM0TUF1RDJOR3F1cktOQ2FxWW1CZERtdUJyZzVYcHhZM1ZBbHFxZFZoSVhV?=

=?utf-8?B?QVFwenVaRnFXYm5VcUxCNDV5d3ZiclNMbUM1ZTN5VmFtTnN3Z2kvQ0lJQ1la?=

=?utf-8?B?V2U4Vy9yQVUyaGx2M1BJczAzcThKT29vSzlocC9GbVcxRGNCRHZjcUlIeXVL?=

=?utf-8?B?OVpCVXBZckFybUU2QU1qYlRRVzVnSVI4bmRFcVF2eUlrMU81emo4NXBnY0ll?=

=?utf-8?B?Y0F2a0dYaS83NEtBTlRDUzR2TFRBeUNhaFJHZWMwVVZHNGtySTArcnplV21H?=

=?utf-8?B?N2pJcnRzcUFaRzFtNW9rU1E9PQ==?=

X-Auto-Response-Suppress: DR, OOF, AutoReply

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-090a5.templateTenant

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 21 Jul 2026 16:49:06.5354

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 7a9b9b11-9d2d-42ea-fe4c-08dee747fa91

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-AuthSource: SJ1PEPF00002320.namprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: Internet

X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL1PPF236BDCF3E

X-Spam_score: 14.2

X-Spam_score_int: 142

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: PayPal Payment Confirmation â€“ Bitcoin Order in Progress

utorok 21. jÃºl 2026 Dear Customer, Your PayPal payment has been received

successfully. We are pleased to confirm that your Bitcoin (BTC) purchase request

has been securely registered and is currently under processing.

Content analysis details: (14.2 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.93.10.20 listed in dnsbl.ahbl.org]

[40.93.10.20 listed in dnsbl.ahbl.org]

[40.93.10.20 listed in dnsbl.ahbl.org]

[40.93.10.20 listed in dnsbl.ahbl.org]

[209.85.128.72 listed in dnsbl.ahbl.org]

[209.85.128.72 listed in dnsbl.ahbl.org]

[209.85.128.72 listed in dnsbl.ahbl.org]

[209.85.128.72 listed in dnsbl.ahbl.org]

[2603:10b6:a03:505:cafe:0:0:30 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:505:cafe:0:0:30 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:505:cafe:0:0:30 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:505:cafe:0:0:30 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:505:0:0:0:24 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:505:0:0:0:24 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:505:0:0:0:24 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:505:0:0:0:24 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.93.10.20 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.93.10.20 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.93.10.20 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.93.10.20 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.72 listed in will-spam-for-food.eu.org]

[209.85.128.72 listed in will-spam-for-food.eu.org]

[209.85.128.72 listed in will-spam-for-food.eu.org]

[209.85.128.72 listed in will-spam-for-food.eu.org]

[209.85.128.72 listed in will-spam-for-food.eu.org]

[209.85.128.72 listed in will-spam-for-food.eu.org]

[209.85.128.72 listed in will-spam-for-food.eu.org]

[209.85.128.72 listed in will-spam-for-food.eu.org]

[2603:10b6:a03:505:cafe:0:0:30 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:cafe:0:0:30 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:cafe:0:0:30 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:cafe:0:0:30 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:cafe:0:0:30 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:cafe:0:0:30 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:cafe:0:0:30 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:cafe:0:0:30 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:0:0:0:24 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:0:0:0:24 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:0:0:0:24 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:0:0:0:24 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:0:0:0:24 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:0:0:0:24 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:0:0:0:24 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:0:0:0:24 listed in]

[will-spam-for-food.eu.org]

[40.93.10.20 listed in will-spam-for-food.eu.org]

[40.93.10.20 listed in will-spam-for-food.eu.org]

[40.93.10.20 listed in will-spam-for-food.eu.org]

[40.93.10.20 listed in will-spam-for-food.eu.org]

[40.93.10.20 listed in will-spam-for-food.eu.org]

[40.93.10.20 listed in will-spam-for-food.eu.org]

[40.93.10.20 listed in will-spam-for-food.eu.org]

[40.93.10.20 listed in will-spam-for-food.eu.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.93.10.20 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.93.10.20 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

1.0 HK_RANDOM_FROM From username looks random

0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

1.0 HK_RANDOM_REPLYTO Reply-To username looks random

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.93.10.20 listed in wl.mailspike.net]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[haressaznzxrrsxaxz321(at)gmail.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[haressaznzxrrsxaxz321(at)gmail.com]

0.6 MEGALONGWORD BODY: Uses really overlong words

0.1 TW_RW BODY: Odd Letter Triples with RW

0.3 LONGWORD BODY: Uses overlong words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.1 TO_IN_SUBJ To address is in Subject

0.0 LOTS_OF_MONEY Huge... sums of money

0.6 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} =?UTF-8?Q?Pozv=C3=A1nky=3A_PayPal_Payment_Confirmation_=2D_Bitcoin_Ord?=

=?UTF-8?Q?er_in_Progress_=40_ut_21=2E_j=C3=BAl_2026_=28cynthiaperez389903=40groups?=

=?UTF-8?Q?=2Eoutlook=2Ecom=29?=

--000000000000fef5da065721cc4e

Content-Type: multipart/alternative; boundary="000000000000fef5d8065721cc4c"

--000000000000fef5d8065721cc4c

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

UGF5UGFsIFBheW1lbnQgQ29uZmlybWF0aW9uIOKAkyBCaXRjb2luIE9yZGVyIGluIFByb2dyZXNz

DQp1dG9yb2sgMjEuIGrDumwgMjAyNg0KDQoNCg0KRGVhciBDdXN0b21lciwNCg0KWW91ciBQYXlQ

YWwgcGF5bWVudCBoYXMgYmVlbiByZWNlaXZlZCBzdWNjZXNzZnVsbHkuIFdlIGFyZSBwbGVhc2Vk

IHRvICANCmNvbmZpcm0gdGhhdCB5b3VyIEJpdGNvaW4gKEJUQykgcHVyY2hhc2UgcmVxdWVzdCBo

YXMgYmVlbiBzZWN1cmVseSAgDQpyZWdpc3RlcmVkIGFuZCBpcyBjdXJyZW50bHkgdW5kZXIgcHJv

Y2Vzc2luZy4NCg0KVHJhbnNhY3Rpb24gU3VtbWFyeToNCg0KUGF5bWVudCBNZXRob2Q6IFBheVBh

bA0KUHVyY2hhc2UgVHlwZTogQml0Y29pbiAoQlRDKQ0KQW1vdW50IENoYXJnZWQ6ICQ5OTkuMDAN

Ck9yZGVyIFN0YXR1czogUHJvY2Vzc2luZw0KDQpZb3VyIHRyYW5zYWN0aW9uIGlzIGN1cnJlbnRs

eSBnb2luZyB0aHJvdWdoIG91ciBzdGFuZGFyZCB2ZXJpZmljYXRpb24gIA0KcHJvY2Vzcy4gT25j

ZSB0aGUgdmVyaWZpY2F0aW9uIGlzIGNvbXBsZXRlZCwgeW91ciBCaXRjb2luIG9yZGVyIHdpbGwg

YmUgIA0KcHJvY2Vzc2VkIGFuZCBmaW5hbGl6ZWQgYXV0b21hdGljYWxseS4NCg0KSWYgeW91IGRv

IG5vdCByZWNvZ25pemUgdGhpcyB0cmFuc2FjdGlvbiwgcGxlYXNlIGNvbnRhY3Qgb3VyIGN1c3Rv

bWVyICANCnN1cHBvcnQgdGVhbSBpbW1lZGlhdGVseSBhdCArMSA4MTMgNTQzIDMxMTkuDQoNClRo

YW5rIHlvdSBmb3IgY2hvb3Npbmcgb3VyIHNlcnZpY2VzLg0KDQpTaW5jZXJlbHksDQpCaWxsaW5n

IERlcGFydG1lbnQNCg0KT3JnYW5pesOhdG9yDQpIYXJlc2FzeiBOeHlzYXJ3c2ENCmhhcmVzc2F6

bnp4cnJzeGF4ejMyMUBnbWFpbC5jb20NCg0KT2Rwb3ZlZHp0ZSBuYSBjeW50aGlhcGVyZXozODk5

MDNAZ3JvdXBzLm91dGxvb2suY29tIGHCoHBvenJpdGUgc2kgxI9hbMWhaWUgIA0KcG9kcm9ibm9z

dGkgbmEgIA0KaHR0cHM6Ly9jYWxlbmRhci5nb29nbGUuY29tL2NhbGVuZGFyL2V2ZW50P2FjdGlv

bj1WSUVXJmVpZD1NekJ0YkRReVpHWnBZVzQzYW1WaWJYUnJjV2QxWjJodGJYUWdZM2x1ZEdocFlY

QmxjbVY2TXpnNU9UQXpRR2R5YjNWd2N5NXZkWFJzYjI5ckxtTnZiUSZ0b2s9TXpFamFHRnlaWE56

WVhwdWVuaHljbk40WVhoNk16SXhRR2R0WVdsc0xtTnZiVGxsTmpVeVlqTmxObUl6TVRRek56TTJZ

VEEyWWprM056QTNZVE01WkRjNFkyUTRaakkyTW1FJmN0ej1Bc2lhJTJGRGhha2EmaGw9c2smZXM9

MA0KVmHFoWEgw7rEjWFzxaUgamUgdm9saXRlxL5uw6EuDQoNCn5+Ly9+fg0KUG96dsOhbmthIHog

S2FsZW5kw6FyYSBHb29nbGU6IGh0dHBzOi8vY2FsZW5kYXIuZ29vZ2xlLmNvbS9jYWxlbmRhci8N

Cg0KVMO6dG8gc3Byw6F2dSBzdGUgZG9zdGFsaSwgcHJldG/FvmUgc3RlIMO6xI1hc3Ruw61rb20g

ZGFuZWogdWRhbG9zdGkuDQoNCkFrIHTDunRvIHBvenbDoW5rdSBwcmVwb8WhbGV0ZSwga3RvcsO9

a2/EvnZlayBqZWogcHLDrWplbWNhIGJ1ZGUgbcO0Y8WlIG9kb3NsYcWlICANCm9kcG92ZcSPIG9y

Z2FuaXrDoXRvcm92aSwgYnnFpSBwcmlkYW7DvSBkbyB6b3puYW11IGhvc3TDrSwgcG96w712YcWl

IGluw71jaCBiZXogIA0Kb2jEvmFkdSBuYSBpY2ggdmxhc3Ruw70gc3RhdiBwb3p2w6Fua3kgYWxl

Ym8gbWVuacWlIHZhxaFlIHBvdHZyZGVuaWUgw7rEjWFzdGkuDQoNCsSOYWzFoWllIGluZm9ybcOh

Y2llICANCmh0dHBzOi8vc3VwcG9ydC5nb29nbGUuY29tL2NhbGVuZGFyL2Fuc3dlci8zNzEzNSNm

b3J3YXJkaW5nDQo=

--000000000000fef5d8065721cc4c

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:offi=

ce">
t=3D"text/html; charset=3DUTF-8">
=3Ddevice-width,initial-scale=3D1">
ight dark">

=20

=20

=20

=20

/InformAction">

--000000000000fef5d8065721cc4c

Content-Type: text/calendar; charset="UTF-8"; method=REQUEST

Content-Transfer-Encoding: quoted-printable

BEGIN:VCALENDAR

PRODID:-//Google Inc//Google Calendar 70.9054//EN

VERSION:2.0

CALSCALE:GREGORIAN

METHOD:REQUEST

BEGIN:VEVENT

DTSTART;VALUE=3DDATE:20260721

DTEND;VALUE=3DDATE:20260722

DTSTAMP:20260721T164905Z

ORGANIZER;CN=3DHaresasz Nxysarwsa:mailto:haressaznzxrrsxaxz321@gmail.com

UID:30ml42dfian7jebmtkqgughmmt@google.com

ATTENDEE;CUTYPE=3DINDIVIDUAL;ROLE=3DREQ-PARTICIPANT;PARTSTAT=3DNEEDS-ACTION=

;RSVP=3D

TRUE;CN=3Dcynthiaperez389903@groups.outlook.com;X-NUM-GUESTS=3D0:mailto:cy=

nthia

perez389903@groups.outlook.com

X-MICROSOFT-CDO-OWNERAPPTID:1392686308

CREATED:20260721T164855Z

DESCRIPTION:Dear Customer\,\n\nYour PayPal payment has been received succes

sfully. We are pleased to confirm that your Bitcoin (BTC) purchase request=

=20

has been securely registered and is currently under processing.\n\nTransac=

t

ion Summary:\n\nPayment Method: PayPal\nPurchase Type: Bitcoin (BTC)\nAmou=

n

t Charged: $999.00\nOrder Status: Processing\n\nYour transaction is curren=

t

ly going through our standard verification process. Once the verification =

i

s completed\, your Bitcoin order will be processed and finalized automatic=

a

lly.\n\nIf you do not recognize this transaction\, please contact our cust=

o

mer support team immediately at +1 813 543 3119.\n\nThank you for choosing=

=20

our services.\n\nSincerely\,\nBilling Department

LAST-MODIFIED:20260721T164856Z

LOCATION:

SEQUENCE:0

STATUS:CONFIRMED

SUMMARY:PayPal Payment Confirmation =E2=80=93 Bitcoin Order in Progress

TRANSP:TRANSPARENT

BEGIN:VALARM

ACTION:DISPLAY

DESCRIPTION:This is an event reminder

TRIGGER:-P0DT7H0M0S

END:VALARM

END:VEVENT

END:VCALENDAR

--000000000000fef5d8065721cc4c--

--000000000000fef5da065721cc4e

Content-Type: application/ics; name="invite.ics"

Content-Disposition: attachment; filename="invite.ics"

Content-Transfer-Encoding: base64

QkVHSU46VkNBTEVOREFSDQpQUk9ESUQ6LS8vR29vZ2xlIEluYy8vR29vZ2xlIENhbGVuZGFyIDcw

LjkwNTQvL0VODQpWRVJTSU9OOjIuMA0KQ0FMU0NBTEU6R1JFR09SSUFODQpNRVRIT0Q6UkVRVUVT

VA0KQkVHSU46VkVWRU5UDQpEVFNUQVJUO1ZBTFVFPURBVEU6MjAyNjA3MjENCkRURU5EO1ZBTFVF

PURBVEU6MjAyNjA3MjINCkRUU1RBTVA6MjAyNjA3MjFUMTY0OTA1Wg0KT1JHQU5JWkVSO0NOPUhh

cmVzYXN6IE54eXNhcndzYTptYWlsdG86aGFyZXNzYXpuenhycnN4YXh6MzIxQGdtYWlsLmNvbQ0K

VUlEOjMwbWw0MmRmaWFuN2plYm10a3FndWdobW10QGdvb2dsZS5jb20NCkFUVEVOREVFO0NVVFlQ

RT1JTkRJVklEVUFMO1JPTEU9UkVRLVBBUlRJQ0lQQU5UO1BBUlRTVEFUPU5FRURTLUFDVElPTjtS

U1ZQPQ0KIFRSVUU7Q049Y3ludGhpYXBlcmV6Mzg5OTAzQGdyb3Vwcy5vdXRsb29rLmNvbTtYLU5V

TS1HVUVTVFM9MDptYWlsdG86Y3ludGhpYQ0KIHBlcmV6Mzg5OTAzQGdyb3Vwcy5vdXRsb29rLmNv

bQ0KWC1NSUNST1NPRlQtQ0RPLU9XTkVSQVBQVElEOjEzOTI2ODYzMDgNCkNSRUFURUQ6MjAyNjA3

MjFUMTY0ODU1Wg0KREVTQ1JJUFRJT046RGVhciBDdXN0b21lclwsXG5cbllvdXIgUGF5UGFsIHBh

eW1lbnQgaGFzIGJlZW4gcmVjZWl2ZWQgc3VjY2VzDQogc2Z1bGx5LiBXZSBhcmUgcGxlYXNlZCB0

byBjb25maXJtIHRoYXQgeW91ciBCaXRjb2luIChCVEMpIHB1cmNoYXNlIHJlcXVlc3QgDQogaGFz

IGJlZW4gc2VjdXJlbHkgcmVnaXN0ZXJlZCBhbmQgaXMgY3VycmVudGx5IHVuZGVyIHByb2Nlc3Np

bmcuXG5cblRyYW5zYWN0DQogaW9uIFN1bW1hcnk6XG5cblBheW1lbnQgTWV0aG9kOiBQYXlQYWxc

blB1cmNoYXNlIFR5cGU6IEJpdGNvaW4gKEJUQylcbkFtb3VuDQogdCBDaGFyZ2VkOiAkOTk5LjAw

XG5PcmRlciBTdGF0dXM6IFByb2Nlc3NpbmdcblxuWW91ciB0cmFuc2FjdGlvbiBpcyBjdXJyZW50

DQogbHkgZ29pbmcgdGhyb3VnaCBvdXIgc3RhbmRhcmQgdmVyaWZpY2F0aW9uIHByb2Nlc3MuIE9u

Y2UgdGhlIHZlcmlmaWNhdGlvbiBpDQogcyBjb21wbGV0ZWRcLCB5b3VyIEJpdGNvaW4gb3JkZXIg

d2lsbCBiZSBwcm9jZXNzZWQgYW5kIGZpbmFsaXplZCBhdXRvbWF0aWNhDQogbGx5LlxuXG5JZiB5

b3UgZG8gbm90IHJlY29nbml6ZSB0aGlzIHRyYW5zYWN0aW9uXCwgcGxlYXNlIGNvbnRhY3Qgb3Vy

IGN1c3RvDQogbWVyIHN1cHBvcnQgdGVhbSBpbW1lZGlhdGVseSBhdCArMSA4MTMgNTQzIDMxMTku

XG5cblRoYW5rIHlvdSBmb3IgY2hvb3NpbmcgDQogb3VyIHNlcnZpY2VzLlxuXG5TaW5jZXJlbHlc

LFxuQmlsbGluZyBEZXBhcnRtZW50DQpMQVNULU1PRElGSUVEOjIwMjYwNzIxVDE2NDg1NloNCkxP

Q0FUSU9OOg0KU0VRVUVOQ0U6MA0KU1RBVFVTOkNPTkZJUk1FRA0KU1VNTUFSWTpQYXlQYWwgUGF5

bWVudCBDb25maXJtYXRpb24g4oCTIEJpdGNvaW4gT3JkZXIgaW4gUHJvZ3Jlc3MNClRSQU5TUDpU

UkFOU1BBUkVOVA0KQkVHSU46VkFMQVJNDQpBQ1RJT046RElTUExBWQ0KREVTQ1JJUFRJT046VGhp

cyBpcyBhbiBldmVudCByZW1pbmRlcg0KVFJJR0dFUjotUDBEVDdIME0wUw0KRU5EOlZBTEFSTQ0K

RU5EOlZFVkVOVA0KRU5EOlZDQUxFTkRBUg0K

--000000000000fef5da065721cc4e--

Web/SEO/App spam from Microsoft Outlook

Posted by Dave Yadallee on Tuesday, July 21. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 21 Jul 2026 11:52:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wmEcY-00000000LWU-0hco

for dave@doctor.nl2k.ab.ca;

Tue, 21 Jul 2026 11:51:10 -0600

Resent-From: The Doctor

Resent-Date: Tue, 21 Jul 2026 11:51:10 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-eastus2azolkn19011034.outbound.protection.outlook.com ([52.103.12.34]:42241 helo=BN8PR05CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wmCM7-000000006RK-1itx

for sales@nk.ca;

Tue, 21 Jul 2026 09:26:38 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=bK7KjAw5p0Ss8zvkS0cpb+YRNMlGN7MlWh/0k6/lnqIJYesFt/o8WCcPgjVLoETdoJerfh10M5GPu88coYOLMFdi4ogMrnYYhBcI3bIPP4je7DW1CY4RVBRUUVSdemHhvy/r29ekVW4Z13gaFz5FFV/yEF/BrGwtwzu9Cv4n1ONiTuKOtVbCK1phw9eNoy874sXpCu6v4tLiN1/9TEqKXwwMWINtAadeCu/SgwfslEOA35HCp340xUr2W0J6hFIOYNiluzcqTGXebfddkgUhfQ9ArDdtxRs1FBzT6cZp6ewYPbKTfYeYW12AaUGlaFLaVJ9WnrbVa8SQuEtGNLxZ7w==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=uLTZH6e1vrRoY2vkAJmiLsgZn5HV8VM3m1OSRxQS3ZQ=;

b=cJTIFcGt3K7BwGXWGfapmipyhsmN8Uocv6uSQ8qG9n3u7lGRoTiWXiKlM5cwxpBjf9dzESWvXBVHYDDjy0klgsOcPY97MnKscOs0CI9AxVmddoslLewlJieRwSaOFYlditfBauunWFCetVt199fDWgOu3mG7yBW8ols7p/meopSKA4nGDznOMCP9IPkQwxI7oW2TqWBUBCaCdjNq/y0GS08xs7+1bHT0Z1Gd8/qNbnL9w8AGL/Oj621nq6vFVHCY52hXSKATi9lntbyo/XI/l9fIydjh5GGwZtj5iYoEwjE51YRUnaLpO48+e9HjGLBW4+LiXl6OeWnxBNECLTVpTg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=uLTZH6e1vrRoY2vkAJmiLsgZn5HV8VM3m1OSRxQS3ZQ=;

b=TCCOFvWtNhjlCXNj2hyul4ibIehIzuD4IVtHVBzsr4dH+BjwcJ1RyQCjy+Pm9GbXe1qI681ETzG+ppdyVo3EhchNQL0nq0K9HhCCA0l1ZEd2iPJfB6gZN1EDqT9XSok7m4ev/UqJmVnCbNedMXXUf0J6JiKpukp+6hFSS1vc19EMU4hGogcq+ATl7iVrkVXz8CtloQnUPjz1IJ/x073b+7LYqqXyvAAVsITwwmaXSDEsd6IJuE2aUah7xpXF9cDA9XHBq6C+K2lwPx2YUqtMc5eqYxSZI4Nbr9YkZkKeyqdfmN4BKYds+JdSSrzUEazyq9x2peYfbPyrO3UZfW2k3w==

Received: from CH3PR84MB3681.NAMPRD84.PROD.OUTLOOK.COM (2603:10b6:610:1cc::11)

by SJ0PR84MB1529.NAMPRD84.PROD.OUTLOOK.COM (2603:10b6:a03:381::16) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.245.10; Tue, 21 Jul

2026 15:25:07 +0000

Received: from CH3PR84MB3681.NAMPRD84.PROD.OUTLOOK.COM

([fe80::e4a2:c71f:f035:f70a]) by CH3PR84MB3681.NAMPRD84.PROD.OUTLOOK.COM

([fe80::e4a2:c71f:f035:f70a%4]) with mapi id 15.21.0245.009; Tue, 21 Jul 2026

15:25:07 +0000

From: John Howlett

To: "sales@nk.ca"

Subject: "Lets Boost Your Online?"

Thread-Topic: "Lets Boost Your Online?"

Thread-Index: AQHdGSSMQGRoO6nEFEajARFFcm+mnA==

Return-Receipt-To:

Date: Tue, 21 Jul 2026 15:24:20 +0000

Message-ID:

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

suggested_attachment_session_id: 2c849d01-dc75-b247-51b6-e7a34b5124cd

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: CH3PR84MB3681:EE_|SJ0PR84MB1529:EE_

x-ms-office365-filtering-correlation-id: f6018dc2-c2d3-4aad-f6ef-08dee73c3f37

x-microsoft-antispam:

BCL:0;ARA:14566002|12121999013|24071999003|22091999003|4140399003|25010399006|24121999003|15030799006|15080799012|24021099003|55001999006|39105399006|20031999006|31061999003|8060799015|8062599012|19110799012|3412199025|440099028|102099032|40105399003|11120399003|26121999007|26131999018;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?BRyBEFhSA0eOuM9nQRe5X61PGoWlh9vxLVsnu4CUEbMeIz9tTkGn8qAi?=

=?Windows-1252?Q?O4DXjcB5jzCsvyPNlMMIahfe9zycw/yWBk14Ak7pCTV38VU3avAfE10m?=

=?Windows-1252?Q?kTFK9paC1AD7FAt0CHYOtEO0lVWeI/Buv3fZAnjbUA6pcnwd3hGtyz9m?=

=?Windows-1252?Q?/bcimk/5xujld/17BWfMvb1AHaCdwNuuIg0RT4nYCXPBFvea/1ii07Dw?=

=?Windows-1252?Q?7sXcf2+k9mN9Z0gUJdJWGAB1emGQHFKd0YNSw+lgL2iUmXF6kHkRY6cK?=

=?Windows-1252?Q?IY/xVX4Lr6Y2ifdJ8ctWH/VDN5351xLbHLLcyZEHrG1/qnLAuNiy+csb?=

=?Windows-1252?Q?c/NjO03mOWs0GVZTAEm+7lLKktetKR1fBp6+a0zC3lWebRykzjfSv9Qp?=

=?Windows-1252?Q?1EeS/QFua8bbJOP0x0oUu1IZ2ni953vKOcwKZgb7EMzC04JBjTzkjECT?=

=?Windows-1252?Q?5/GUnnPrWtoj44ucd5OwmQl46X2jBKNYq+augWy36oVK+Yu27yhqeiD+?=

=?Windows-1252?Q?DbDPXEicvmC0La6fe+UpCMUcPqQlesW3ywChi/KOzYdynZbYntHQOB9z?=

=?Windows-1252?Q?VS/ucyz/gGRisMsuPj98PFy0kon0qvz1/vUBPWbt/HJSUIgPvXm/4CSf?=

=?Windows-1252?Q?MABtx/pqe06Vke8I9gG+GvWBklMqfIQdBG5hgFrFVKHLAxlocwc3yosi?=

=?Windows-1252?Q?Ovj2SXc3QDQO/YRixDqAK1e1hRt+6Glf2FNZLwsiUVYWXiJRnIM/3pj0?=

=?Windows-1252?Q?SB/4+IrmlC76qTA4GjNr+ZF3BReB+2Q/XhBfiTkqrfqH2lYnJ7ge3K5E?=

=?Windows-1252?Q?3/CdlBMOeTZ+Xd48JPggCab6wfKr3ya8/xgpI8bZTaLH07j/S46+4KZi?=

=?Windows-1252?Q?pPord7Jk8SXe/D1TDCk7KWyAq71dq/Kt7yc4REdyAbSppkTPGsv0Xjvp?=

=?Windows-1252?Q?bhwM+x9K7UdRdat38lfyrMfK1fhenwl/O1rzoOxV0K3OgvoEw0N09fIg?=

=?Windows-1252?Q?cf6yk0+TWGr6r9Xtvr5FWoFoxFUgG/GTB8MS1WqcZYXDgacBTorOyKUl?=

=?Windows-1252?Q?QID9yN2mrLMS/gNi9MlPyvOpQ1g9qOKF49Jk9SfFKHNIbC+Cj8VxIuOx?=

=?Windows-1252?Q?GfcEAHyykRX0KbUJqtJkoe8bBz9xrSpz4cacSUsj+L3mBV6EwOfVzHeE?=

=?Windows-1252?Q?CKf5ybvyF6+btoIARGzfvBZCyBst6ejFxLa/ReuvonDKbylPZbppTnL2?=

=?Windows-1252?Q?WLE6bhMImPtxpXeLLwaPEuppAdNSrxvrCgB9dmaRJRxtHBr3J/IpoaVC?=

=?Windows-1252?Q?oOILcg=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?HIBXZ+jtcX50oNjFqiS5/1HMcV90Dh0Mk9DXJAqApdaFAmtg8a576Zq2?=

=?Windows-1252?Q?t+AWqNMBk/mE/a+7k6WHpfed48VzmOu9/mBE/BVZaMOPX62QQupM7S0y?=

=?Windows-1252?Q?3J7uwekYewyjCkil3q17PMVygTj5iRvkG1CGy3F2Rnlxzpb9tYX9f2Vn?=

=?Windows-1252?Q?mkaSw7z7eY/VVAk7M9D+MnooQm9RW+ph0OYr99J+hIwjc7Pt/er4dfdF?=

=?Windows-1252?Q?je/v5tDYwWwLrQ95/dakf3Bf7KJ2EwIVt3zYzczhB83LPDAaBB8B8IGL?=

=?Windows-1252?Q?j1la7wgC9RZNGzU4aWjpqNHIKKelSB9GP6EHhGD7Hoe0aNySoL4DmBA6?=

=?Windows-1252?Q?hH1RnDva3LOHTy0AQVfuBaCxATOFbzacmRb1DmYy6IzKYkGoWveqIoau?=

=?Windows-1252?Q?Q/X1FFzfL12I9/5hTwqXtEVYqlzpbtxHL9wKeRooswcODGG7Wy33FmP+?=

=?Windows-1252?Q?S4gDi2SrhwNnuUayIpPGHmSgVEP6qtJDA1EP0+03RldrhJ5jMhPOt/Jv?=

=?Windows-1252?Q?FbeP0Nsl2JTT0MhsoGH43bkpfU3PAtWPADY3sZW8xMI5iSVG/sMqR+EC?=

=?Windows-1252?Q?ZbyBT/oKiJVDE56YoUeS35Su+PDUrA9TZzFjxS3wbELXwdXmMlsMRVqG?=

=?Windows-1252?Q?2TbKiVbeLLQMXNDM1DVOfKQhUYC5dg9Lbw+xWNSLXuy181UVmedrMphn?=

=?Windows-1252?Q?GWcniLkwFSGpU86t6vVJhansr54Rs7xTAvFuhC7aIQUxpUgJByqupuSZ?=

=?Windows-1252?Q?npd2hYQs7xv5YuvIIqabfk3rS9e2cueeQ4yebJwOpna67c8vHuLgQhMU?=

=?Windows-1252?Q?zrmMYesqkhhkSVQrAPogae/ugnWytPMZe0agU2z5sr0KmdjZtnBMvKOR?=

=?Windows-1252?Q?3u4d6MojiAjCcV4iIzkk6YlTzK5i29tQU4JLLmQrr65GtbgebGeKtM6j?=

=?Windows-1252?Q?GUGkWW2twfffMXK6sw95k9kEieRab34pk0beF8jS4ZNeJUmJvMt45Ci7?=

=?Windows-1252?Q?z48RX2a0DIMfuY3LbcxLrUiMOAuH6C7qb2J6kZLllhipNIOgu/d3H+dl?=

=?Windows-1252?Q?OC3bu0yhCVlMM78jxv+DWNMlsbDWTDGDzHkfXfJYVHJC7svG14f7rX4d?=

=?Windows-1252?Q?dzFWvBsy6ZkjbWJ9IY9fLNfX2BZqX936uoYGUiMpdzH9oJlpfzYz4xDV?=

=?Windows-1252?Q?H6z5o38RIBkDOzj0Z1a9gWRNa9XI9INvFf4T32LIog4cxbUFG8ZfB+r6?=

=?Windows-1252?Q?1ND3BFKbsKs4tO5v1B4+FmZqVErbUwrt1SMTjIJ7TNTMvKdT2ay3YLQs?=

=?Windows-1252?Q?3jHnX3Mg3D13G8+6J0WZB0pijZsc6+oDyvTdbA61GSDUORicS220OEAW?=

=?Windows-1252?Q?pArTlmOHYGuS6Mduh3Bklnh3Vk9EdUggb3dxpY3cz56tOLbzKKmUeANg?=

=?Windows-1252?Q?RVFCfLYU+yCD6NgQfG5XI2Jx0okwqKUdFrJVC4Eys5Gs5J2Em23+oz2r?=

=?Windows-1252?Q?sVAkMuxB?=

Content-Type: multipart/alternative;

boundary="_000_CH3PR84MB3681638C55420405518032B2B9C22CH3PR84MB3681NAMP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: CH3PR84MB3681.NAMPRD84.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: f6018dc2-c2d3-4aad-f6ef-08dee73c3f37

X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Jul 2026 15:24:20.7546

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ0PR84MB1529

--_000_CH3PR84MB3681638C55420405518032B2B9C22CH3PR84MB3681NAMP_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable

Hello,

I'm looking at your current website and I'm wondering if you've thought abo=

ut updating your website.

I am confident that I can viral your website on Google that will not only g=

ive you a fresh look, but is also focused on generating more visitors, lead=

s & revenue for your business.

If this sounds of interest to you, let=92s have a chat!

Let me know if you are interested, we will send you our Packages and price =

list.

Kind regards,

John Howlett

--_000_CH3PR84MB3681638C55420405518032B2B9C22CH3PR84MB3681NAMP_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable

252">

ly: "Arial", "Helvetica", sans-serif; font-size: 11pt; =

color: rgb(0, 0, 0);" class=3D"elementToProof">

Hello,

ly: "Arial", "Helvetica", sans-serif; font-size: 11pt; =

color: rgb(0, 0, 0);" class=3D"elementToProof">

ly: "Arial", "Helvetica", sans-serif; font-size: 11pt; =

color: rgb(0, 0, 0);" class=3D"elementToProof">

I'm looking at your current website and I'm wondering if you've thought abo=

ut updating your website.

ly: "Arial", "Helvetica", sans-serif; font-size: 11pt; =

color: rgb(0, 0, 0);" class=3D"elementToProof">

I am confident that I can viral your website on Google that will not only g=

ive you a fresh look, but is also focused on generating more visitors, lead=

s & revenue for your business.

ly: "Arial", "Helvetica", sans-serif; font-size: 11pt; =

color: rgb(0, 0, 0);" class=3D"elementToProof">

ly: "Arial", "Helvetica", sans-serif; font-size: 11pt; =

color: rgb(0, 0, 0);" class=3D"elementToProof">

If this sounds of interest to you, let=92s have a chat!

ly: "Arial", "Helvetica", sans-serif; font-size: 11pt; =

color: rgb(0, 0, 0);" class=3D"elementToProof">

ly: "Arial", "Helvetica", sans-serif; font-size: 11pt; =

color: rgb(0, 0, 0);" class=3D"elementToProof">

Let me know if you are interested, we will send you our Packages and price =

list.

ly: "Arial", "Helvetica", sans-serif; font-size: 11pt; =

color: rgb(0, 0, 0);" class=3D"elementToProof">

ly: "Arial", "Helvetica", sans-serif; font-size: 11pt; =

color: rgb(0, 0, 0);" class=3D"elementToProof">

Kind regards,

erif; font-size: 11pt; color: rgb(0, 0, 0);">

John Howlett

--_000_CH3PR84MB3681638C55420405518032B2B9C22CH3PR84MB3681NAMP_--

WEb/SEo/App spam from Microsoft Outlook

Posted by Dave Yadallee on Tuesday, July 21. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 21 Jul 2026 11:51:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wmEcE-00000000LUt-1dyZ

for dave@doctor.nl2k.ab.ca;

Tue, 21 Jul 2026 11:50:50 -0600

Resent-From: The Doctor

Resent-Date: Tue, 21 Jul 2026 11:50:50 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-koreacentralazolkn19013074.outbound.protection.outlook.com ([52.103.74.74]:15459 helo=SEYPR02CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wmCAm-000000004vp-0ccs

for root@nk.ca;

Tue, 21 Jul 2026 09:14:30 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=KULpOlZeL4GrsSw/oP1/4s4QNwCcnC7/zQdaov8/wTydTU8B9YWwm7/VQgDg+Yfqbl4dMjdE1J+Wl98mwnrYzWu8ZUCmRQ9/K1nFqkUoCcdKMtdA4YXAtOjIy5wSXfeNtcktSgeNUT23/O0w5cMxRc5SMy0PCC7dEGCnGsjDufcc+0qYEs2s937E8ZdGAh0NkCl6fp6oVyaEQ72tHgespVNj5NedT1GzzMjmeHrdRgVl4QLLSn9g8dRZyPVqXfTwVQNIWE6ahJYtMbp1AWi6SWVB7o0/AYc0jwhPOG0lZDTEQ4TS87ujaVco4Q0nxQWVtL5Vdm/zYE1nu+kJxuohFw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=sIJPpvLCask134jG3WMqZwY+u69r4vELKnF8VIZFp/U=;

b=dVzxXpAUGzLSaK4kCiRkYtkTwsd0183/vT5PAdNIo9xv5azySGO/KAaiL/slfCHP8FHPEqpQ5Dsm+nsbzphRCGKay8HI51fiPOKAaPXMqd88g/Vw49I8dTgeUM3r55amS2HhwBe4hHKBz5CxVCjeBC5FDZ2igh4LMi0efuMAfxXLbBeLlqcDPOYJLBgMpxQvPPZvb8v4caDp2qlst3MPPEa8MzG8VAfUy1tVFQjCWECW3a48EpTP18H6TEiKOHPD80b3OSRAOKRyHBheI7+sutiwt2imcdHq+Hk4+1k2mOuPEmXU/iWARvnGRUaaFfaMtlvNwT4i7LR/rcASq93rKg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=sIJPpvLCask134jG3WMqZwY+u69r4vELKnF8VIZFp/U=;

b=V2/KBiKXKDtc2K3b8BmEcXPJUDTy3LXkQ6kEDJH2YaSR0cLMnYaqFLXS2/nCpKtmKMWV5tT65rU1Y4adbG1QpOn+Z5Rioks6BkS7hWagdJMkEqcH35g1I/69SETV/OTNBsAm7BLJreaMDIsz0vJoXxgvhv87jiv2xt+vqOfw56GZh+lLBHoHAvZ9vXpbL9zvarlqFaGRBMJ5IQpxxgz2OgAmlavop1CZhkEsne0NSIi1lusFjMIU+GfaCDGN5l1SOFmCvuPj6HyfJpuMl2VVMmD47Pt15eCifp7d3RXwvgYxV7ojb7rymTGr4tnRt7xRik9subyeubjoEIrSzFSuWw==

Received: from SEZPR04MB6755.apcprd04.prod.outlook.com (2603:1096:101:ea::15)

by JH0PR04MB7202.apcprd04.prod.outlook.com (2603:1096:990:35::13) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.245.10; Tue, 21 Jul

2026 15:12:26 +0000

Received: from SEZPR04MB6755.apcprd04.prod.outlook.com

([fe80::64a3:14f5:ed03:4036]) by SEZPR04MB6755.apcprd04.prod.outlook.com

([fe80::64a3:14f5:ed03:4036%5]) with mapi id 15.21.0245.009; Tue, 21 Jul 2026

15:12:26 +0000

From: Somveer Rathor

Subject: improvement ideas

Thread-Topic: improvement ideas

Thread-Index: AQHdGSNRJe4FpBfthEqspDkc+iQP8w==

Date: Tue, 21 Jul 2026 15:12:25 +0000

Message-ID:

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SEZPR04MB6755:EE_|JH0PR04MB7202:EE_

x-ms-office365-filtering-correlation-id: bb7f6cf7-1eed-4706-2b8c-08dee73a789d

x-microsoft-antispam:

BCL:0;ARA:14566002|25010399006|24121999003|37011999003|24071999003|20031999006|22091999003|15030799006|15080799012|24021099003|4140399003|55001999006|31061999003|39105399006|8060799015|19110799012|8062599012|3412199025|440099028|102099032|39145399003|41105399003|40105399003|26121999007|35041999009;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?N/hSo+lLVa3LfCR7WO5hsJ3XPZ+fxFrPXwqMcyET00uFBXwYWtgaegeq?=

=?Windows-1252?Q?kMFMu6El+tcLYMUkwrDTMETEvP8drrLB/AFRrxj+6N7CfXujWetXvaxh?=

=?Windows-1252?Q?+H03+k3HfReNSn82tpYz5NRS24e3VSGwLqzVcXKx+zEgCEbz+gMzveEK?=

=?Windows-1252?Q?pk69WOt3cEMkxVQwoiKj3Rkm8TcZE2OaRoYNVTlvIaFijXHJvQ4Do4II?=

=?Windows-1252?Q?TOLdQbJK/Gy9go1gkBj1q2H/frGsf+3rclCIG5u+1Oqf0QRWKSUZizuv?=

=?Windows-1252?Q?QZJs/J2QP+opTtthcyMbBIafD16iBVoFkFnfidq9/PfRphpmJ6xzl1n/?=

=?Windows-1252?Q?vfYifccy6adAKelNKC6QDDjj6/guylJOdPfI9svpffdJZtpGntG54gjb?=

=?Windows-1252?Q?0mjeYXBJJLzYiksLnUgXp9DubwiC7d5hbUoYWxNKSAZXv0GOJl0KI7zE?=

=?Windows-1252?Q?YCCKSNunvOlhOSrcVwbzuzs8Om37iMoCYXZWQRDoPlcZHmphI7a5vbWz?=

=?Windows-1252?Q?zJMTP1XfuVf3QdK7wAlkcPk2dOj3Iaec1RUGc2KJdTC39xexBde0HulC?=

=?Windows-1252?Q?yPdzKM4CfHQ0wvE8qGN8apdHHEGyFDcWTPgnkDo0/Yc1XcKN0bki8shF?=

=?Windows-1252?Q?j4KvUD4gh8iO4GK5AXfUrjYwNs+ve3F/rytaccIR9quk26WC4A5SjtRv?=

=?Windows-1252?Q?iYs9QCtANC5OuQuXgBSDdz44eK0xDq6HQolz+arBT4pRYCRDG+zdsRIK?=

=?Windows-1252?Q?II2gmSnDjbwMZ1deIkJUk7Nvu9lfV6IRut6k+WWCURuvSrmif493LLtR?=

=?Windows-1252?Q?C4Cq8yeQahErC2CQUvwqryPdS9ZzyCC2dSSwPeEpxZoMuuVBCXgz21+s?=

=?Windows-1252?Q?qioQdA3LhKXUCWq1CKteGfren5lQUJHmBlEdIcG/0jEamjLxT9cJc2SD?=

=?Windows-1252?Q?UPjlAnhkAzG+bBh10N66QIA1LxTDZSHZJ6hW8vVwHvSiqbNmysmy1SS3?=

=?Windows-1252?Q?kINtWbY/hdzbRCDxQvY79rNwyYMNunkJEjR/8wK/VlYjtmvNnMz6qheJ?=

=?Windows-1252?Q?+yd1bNvNwmj1mjYe7tkTfiUObAPdtm+tl8AlWf4AmuXh8X0KJtZDLn6r?=

=?Windows-1252?Q?p/WBKCWtcU55LDkp/2CUTStbhuBGXmbk72+XAXguTSPrThLwwo0iWzcB?=

=?Windows-1252?Q?If1ZHBIxF499a6X98OO5Jf4quSqss7EASzmpxzuLsKY5oakZVKuGCFdD?=

=?Windows-1252?Q?wznGU7sa5qnfPos52sADybZzIG9z8lqu5tfRzbyWATy0tzYBQDOJoAuM?=

=?Windows-1252?Q?biuUlmo2B9LOv2epKEncIO/gTqEwLDJ4jLcrt3jWZVUdj8JQ8wFwWNVe?=

=?Windows-1252?Q?IjGa54bTlGHnHg=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?eguevzJVLKbhFv6I3iPRuf6XrLkXdret5XqcgDVhDrxB4fAykQrRZ7Ze?=

=?Windows-1252?Q?RkPVXh9i8T5L0b684zCJGr2NuY0FFZ1DvdR9cMEDuviAMwXW9bo0UeH6?=

=?Windows-1252?Q?s0lA/O6EujVoxxzpYqFp8ofmWiVzuHAYKCbaQzSs1gZT+0yGmQgQH85G?=

=?Windows-1252?Q?JOuO47Uzf2wKEw0/cLtEGnWUxgb9ExnR06U3uWkGiEzZh5vBnycv+TuK?=

=?Windows-1252?Q?A54O8HEnH1jKj3KU1Mku86n2WSN2JZhTkkEKGk2hIuqQOqLixmBgO1pM?=

=?Windows-1252?Q?bynMHWM/o8k9OE0NtduFQbMZRBpkqRlkYJ5WM9GR2hUUIfTAdGYiWbCv?=

=?Windows-1252?Q?LyZkfXpmT3lR0MKrAhgq8TT/YODN8+WSQxV85EDr0zJR7kO2J1tn9GK5?=

=?Windows-1252?Q?eVLAxTN51v1GntuZnzE+JPR7c8b2h7V+RfKo6R+trV+Btw7cVt30z1fw?=

=?Windows-1252?Q?ySlFzlcmN7uWiTwXQbjrh+yf3G1AjOhST+kQyZxtc0YnGWDtfVM4+Lv+?=

=?Windows-1252?Q?6X3xPxgraOK/qKnhiUN8A9DJ1lVNQLPqgkl/+M4iN28Qz05W/Duby5z1?=

=?Windows-1252?Q?7oP4xyL/wsXH7MaOWV0my2Th5AFpPZfkrXl0B9xVO9l3KdkoN6urKw1i?=

=?Windows-1252?Q?JP/w8g/Kire7f/uQcpMsDzssNO3Ou5y3pt0gm8PLZhYbRXyuf3o2Qz+a?=

=?Windows-1252?Q?qZrYri5t0q8AOtQmTgTNufpM6MTWj2cJMBhDFoWP8D6RIc1MHPoT6mwe?=

=?Windows-1252?Q?ZVTGGm43DR42FtYUJIflrV4poRyLETIMBZmrdKN4RdtFF2gqnfAQHRbm?=

=?Windows-1252?Q?MOGFUSR+tbePxKR83OWKB1Gg4RZquRK4wrI4xTk6f0dJgTbCsDsFAjs+?=

=?Windows-1252?Q?bifxzkMu02Z1Zt9FvZ7pjkXkZeZ0n3wbRPgJOl3s63yk6dAyNckhVwab?=

=?Windows-1252?Q?3eNDqu5JIBVPv53/hJZX8DDjjtFaiBIDJAAPb0zyZsoq4X+1mFEdIX/W?=

=?Windows-1252?Q?8eiTqe7yYxG5iPfsBP9vV548GgZXhcYJiC0GCQjDjXlyITO+th5xtNTP?=

=?Windows-1252?Q?TWTIEuMITwKxYsxijP3z9PxiG03B7BdCD9fIgPBMWZGBbAeHGYiKJPAy?=

=?Windows-1252?Q?nZN64Ugm/3br7qaXBRgneP0JkDODRGYcRk0XM/h/u9ANzsSl1oKEh4qD?=

=?Windows-1252?Q?iuJS2MRygi4hHvvWUXh1C1mvEfDIzANPomn5VqFZMINqq33zxSxcwB9x?=

=?Windows-1252?Q?IoldeNUB+Kq0CueunVymKH1hZe3vrI9pbyzy8siOfw3nLqyqPjPRiUxI?=

=?Windows-1252?Q?IIi+Krc4Dnnhmx2Y/dtnNfLURTkf9JWfAQlA7y4/4QNok4+PbgpL4Ju3?=

=?Windows-1252?Q?U+4DmBbBoA2nmZ8n+VSxzhE/YerkguzoosD7tdLou9Jkz4hxxvHGg6OV?=

=?Windows-1252?Q?edSDZpJOwH/8Ny7IDq6UNDEHWOic79mzC9t1AZZh8gh1ZC/nm2uq75dK?=

=?Windows-1252?Q?MXONCv+wyA9h+CGFx1rbOhgbX175iUPX4/XYhjwWYebQuIGGcvDg1RzO?=

=?Windows-1252?Q?SpKAj9K2QY0x6nQtEO5aeLwZrVaJK0oJPGUUMg=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_SEZPR04MB675557FD15A8D7353E02B27FB2C22SEZPR04MB6755apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SEZPR04MB6755.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: bb7f6cf7-1eed-4706-2b8c-08dee73a789d

X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Jul 2026 15:12:25.0429

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: JH0PR04MB7202

--_000_SEZPR04MB675557FD15A8D7353E02B27FB2C22SEZPR04MB6755apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable

Hi, I found a few important SEO work on your site. Would you like proposal =

and 3=964 ranking improvement ideas? May I send a price list ?

--_000_SEZPR04MB675557FD15A8D7353E02B27FB2C22SEZPR04MB6755apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable

252">

nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Hi, I found a few important SEO work on your site. Would you like proposal =

and 3=964 ranking improvement ideas? May I send a price list ?

--_000_SEZPR04MB675557FD15A8D7353E02B27FB2C22SEZPR04MB6755apcp_--

Aamzon Phish from Google Gmail

Posted by Dave Yadallee on Tuesday, July 21. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 21 Jul 2026 11:50:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wmEbE-00000000LN2-2efY

for dave@doctor.nl2k.ab.ca;

Tue, 21 Jul 2026 11:49:48 -0600

Resent-From: The Doctor

Resent-Date: Tue, 21 Jul 2026 11:49:48 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f53.google.com ([209.85.216.53]:43061)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wmBS1-00000000PUw-3KFy

for sales@nk.ca;

Tue, 21 Jul 2026 08:28:14 -0600

Received: by mail-pj1-f53.google.com with SMTP id 98e67ed59e1d1-38175907a56so3844292a91.0

for ; Tue, 21 Jul 2026 07:27:18 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=aaa27.russia4.biz.id; s=google; t=1784644033; x=1785248833; darn=nk.ca;

h=content-transfer-encoding:content-type:mime-version

:list-unsubscribe:precedence:importance:message-id:subject:to:date

:from:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=a4pXnLEmRYbBQt49W7q06T0X3uGSAEkO9qP0IaR4gUc=;

b=BE1BOk/cd7JllVUqIlNk9zp+MlIHtnWItipNb/5LZVMqDWZ+VgyuRdrbYP/0aiiBit

cZmoh2MlKGPNkLRuvxpAq+ExXZeE5iPeiCNzDO0xZdg2sPEuk0sOVmLVGfngznffwPnG

P8rVnt4qPr6EV1QkzeM7Rw7tomNdPay+Lzr+9U46fvkXYw58IWfzJyLUsWju/X82cjhM

oHIg/F/jSMOngNc/+ATNDoExRMF1QPVFyZeJuuelRNyK4QyP4vSO08nkyoduFLZJtTgj

+nbAoMZVBZoVKoxzv0t4LYnoNkF4ouc1t49MRVRb+ENTH4/hI7yERCPPyHHT2KcNHpZp

x2zg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1784644033; x=1785248833;

h=content-transfer-encoding:content-type:mime-version

:list-unsubscribe:precedence:importance:message-id:subject:to:date

:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=a4pXnLEmRYbBQt49W7q06T0X3uGSAEkO9qP0IaR4gUc=;

b=A3PruA9qSFnYqWT21MgYU/rNx2Zb7BAWBioNnffjob6SerQkg2H3PYyMuWfow8Tdon

CU6Ay88r1EOzjMUIsdlRlScDzNFCpZmkbGVI0aEd3P++UGiCFWf39pMSm/BBnx8okklY

94sJP42CtjDjkMuvJtmo9/fAdWgcwF2CxyXCVNfyK76Fy1HGqBzsonhlTMvnUmal1r9a

FNN2AkPUecFzJcMag178f8Dx+fJ6beFwTNi9IQ9Q4+0WYM3ewNyli+R679PrpuESoEU8

zWQNfA53jqMxPwptZgGNbctj9sFyfyrT4XUtfRAlTCgwaNvLvMIBihXz7vub2+m8canO

XKTg==

X-Gm-Message-State: AOJu0Yx1Q1VNglrFov4R/aAF+zJm8uSbhmxBQJwiGd2Dixw34NnJ5sJX

K3iLbmhD0cnO9mmAhSJF9F5Vd4mthJX4TTBhD5PiM38ngv+0Z4/ikpITfuIG9xhYSSIThzmsoKf

g8G3PPHT/

X-Gm-Gg: AR+sD11CQVk/DSzNYHQ3nEWnKKowdfK0u2ACZdLpdkViE3s5zsCFBHOXmUP4BqFr6Gt

+7IwpA6MCNi2gKJIZKvCqYCP2+qBohra6+GMW9uG7IWesOBoqPzJ1qYJtNWt57xOk9Owfr9ELAE

CnLOZa/gRbeOnhqGn0Gv/G1GvXzHPB1P9RSzpzizagQDsHx+r2nFSwxx/YmLQaaGXF5TB36gRXH

IcmEx/PP8azJpkhjL5DMrKEQ3QQ2v7e+x5Fs4NCH1txCxtxKgZq2DK4GQt5l3tQ+rKIaoMw9Mxt

l3DUVoh+MJtZvViinVP7wi2uZ4lmevXzjPid1mWu4PyuNJpi4Q7P13+0EWkNaFdJU7ihivPda1X

frViMBy+Pq38Cx7jHVPulvtVihs/3q5D2Xc8cPVoqVrs91dbaQn1hoh9OoxosYry61nc3ipRRsC

+D/tZG8Hxg3f5BrVZZAiOCjC5EpXqeI6M03ve6D6ZnFNY2ggC56h0=

X-Received: by 2002:a17:90b:55d0:b0:37d:a52a:ff12 with SMTP id 98e67ed59e1d1-38e4b610e4amr16339734a91.10.1784644032850;

Tue, 21 Jul 2026 07:27:12 -0700 (PDT)

Received: from mail-qv1-4141.google.com ([43.98.175.156])

by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-38e60d37ed0sm964639a91.4.2026.07.21.07.27.11

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 21 Jul 2026 07:27:12 -0700 (PDT)

From: "=?UTF-8?Q?Noreply?="

X-Google-Original-From: =?UTF-8?Q?Noreply?=

Date: Tue, 21 Jul 2026 21:27:09 +0700

To: sales@nk.ca

Subject: =?UTF-8?Q?Sign in to a new device on Tue, July 21, 2026 9:27 PM?=

Message-ID:

X-Priority: 1

X-Mailer: Microsoft Outlook 16.0

X-Originating-IP: []

X-Priority: 3 (Normal)

Importance: normal

X-MSMail-Priority: Normal

Precedence: bulk

List-Unsubscribe:

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 13.5

X-Spam_score_int: 135

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Dear sales@nk.ca, Your Amazon account has been accessed from

another device. Please verify your Amazon account information promptly so

that you can continue to enjoy all the benefits of your account.

Content analysis details: (13.5 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.216.53 listed in dnsbl.ahbl.org]

[209.85.216.53 listed in dnsbl.ahbl.org]

[209.85.216.53 listed in dnsbl.ahbl.org]

[209.85.216.53 listed in dnsbl.ahbl.org]

[43.98.175.156 listed in dnsbl.ahbl.org]

[43.98.175.156 listed in dnsbl.ahbl.org]

[43.98.175.156 listed in dnsbl.ahbl.org]

[43.98.175.156 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.216.53 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.216.53 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.216.53 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.216.53 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[43.98.175.156 listed in will-spam-for-food.eu.org]

[43.98.175.156 listed in will-spam-for-food.eu.org]

[43.98.175.156 listed in will-spam-for-food.eu.org]

[43.98.175.156 listed in will-spam-for-food.eu.org]

[43.98.175.156 listed in will-spam-for-food.eu.org]

[43.98.175.156 listed in will-spam-for-food.eu.org]

[43.98.175.156 listed in will-spam-for-food.eu.org]

[43.98.175.156 listed in will-spam-for-food.eu.org]

[209.85.216.53 listed in will-spam-for-food.eu.org]

[209.85.216.53 listed in will-spam-for-food.eu.org]

[209.85.216.53 listed in will-spam-for-food.eu.org]

[209.85.216.53 listed in will-spam-for-food.eu.org]

[209.85.216.53 listed in will-spam-for-food.eu.org]

[209.85.216.53 listed in will-spam-for-food.eu.org]

[209.85.216.53 listed in will-spam-for-food.eu.org]

[209.85.216.53 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.53 listed in list.dnswl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[43.98.175.156 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 BAD_ENC_HEADER Message has bad MIME encoding in the header

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

1.5 DEAR_EMAIL BODY: Message contains Dear email address

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.53 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.216.53 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.8 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

3.0 URI_GOOGDRAWPREVIEW_MINFP Link to image at Google Docs, probable

phishing

Subject: {SPAM?} =?UTF-8?Q?Sign in to a new device on Tue, July 21, 2026 9:27 PM?=

=3D"100%" class=3D"x_main-container" style=3D"width:100%; max-width:578px; =

min-width:343px">

ter" width=3D"100%" style=3D"margin:0 auto; width:100%; border-spacing:0; f=

ont-family:sans-serif; color:#4a4a4a">

t-table" style=3D"border-radius:16px; font-family:CircularStd,Arial">

class=3D"x_logo-table" bgcolor=3D"#ffffff" style=3D"border-top-left-radius=

:16px; border-top-right-radius:16px; background-color:#fff">

=3D"padding-top:32px; padding-bottom:24px">
src=3D"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAGsAAAAfCAMAAADX0sPpA=

AAAA3NCSVQICAjb4U/gAAAAflBMVEVHcEwTExNPT0+Wlpbw8PBnZ2dzc3MAAAD/mQH+/PocHBwL=

Cws1NTWwsLD4+Pj/qyuhoaHHx8f/t0ojIyNaWlrk5ORHR0cpKSl8fHyMjIyEhIT/oRTb29v/7M6=

9vb3+89//3qrR0dFAQEAtLS3/x3G3t7f/0Iumpqb/1pb/zoSHeXsgAAAAAXRSTlMAQObYZgAAAF=

96VFh0UmF3IHByb2ZpbGUgdHlwZSBBUFAxAAAImeNKT81LLcpMVigoyk/LzEnlUgADYxMuE0sTS=

6NEAwMDCwMIMDQwMDYEkkZAtjlUKNEABZgamFmaGZsZmgMxiM8FAEi2FMk61EMyAAADWklEQVRI=

ibWU27aiMAyGyxmkUM6CgIDg6f1fcJo0CLMUx+Xek5tCSfKlyU8ZY2yw+E7bnSqTgRllWYVmyUc=

9Ziw0irEwQvzAwkhPNW2fHfHNLO3ZSow0DZ1z/aqcz3ZZ5iwqxlNF0WCe7ZClA0TsHMePOW4ETM=

dVR/eBz44WvMbOYhAYp+qZN/AVAoMDbhQLrFxCeKhYWqHex7mMSvrl6eJoPLMG7VFyTizLX6LRG=

tgoggCLPivWk52oJq08HsCfQyAfx5FjAans4QnWqoLojFj+KlqNh16QaRDLv+aV6lZzhGx7eWAo=

JpKO0BgNB+R5jBWq1+wMa0zroFhOlmNj08e5KlsPYPB7uXsgFgwEco+hyp3KNThYFiACqCWn6Go=

en0WnDVOVBlg7UzlobG2e2Rx3K1ZEXYBuRHQuJcV8OKxYMTRjNKkylAwctFDROlPnXLHCIBtpsD=

MLDppR9MLKqyJVMyBWyKlzzIQEJaMDSndg2fL1+BerOS0aeMuKHkqbWTbFyDL8NUs27yXLhDlp9=

jlO/8GC1eFGXD1YqIOT9zkLpSyF4+3fs8yU5vfQBu5ojap4R7mRlW70cKSU5u49axY1viMLsjp2=

rm42TlpYa+OJpdFmTOrdYhn04yiEfLiqyTkaLxs1ujRcSn7Jgm/cYx7+fLLRWywcl0Eyh9Hoi6S=

coyr1qq4Gv9lgoQqLA92r1iYLk2m2TWKM2Uq+cOPhpWThFWizDVY0+xcaFr6pwzn3Diayb+Bd41=

mmcx9Zy9V8MrdYdM/7B3md+MHWvKSwmxEdx0H+wYXURlaclSxyYw/3TEOtyXD3NYvFpWVVIN0IZ=

MYCwzDAPZbrgKkM44y6vlqWHYSwA99D+LE8uH/Vo7x/rKKwY0oqoyCnKdeA/di8fhLSktuX4cnd=

+9S3Fy5Z9x2sd0X/Ie1279u2BeKXLNYJV9w+PpsH1dUfuz+FT65bT+0nnu1U9+ziJt+ipPW1nIG=

4t2/L9dq77J7oWOJ+qQ1l3YQjF1PfveR5nVQgeEwe6+r623GRtQlJTCRT33Yd/kXwM3VtPyUkwA=

Qa3buXn6GQVrsPqwXZslcnaqRCfK2MlXUX4W6ZuFDjuuSHHZzNay/r0z1OdFnJ5jdOtfBuckCiB=

hM4vd/M/v/sDxjwSo5nfU0ZAAAAAElFTkSuQmCC" height=3D"39" alt=3D"

Information regarding your payment from Amazon Prime

">

"background-color:#ffffff; text-align:center; padding-bottom:52px">

32" width=3D"100%" style=3D"padding-top:32px; width:100%; border-top:1px so=

lid #e5e5e5">

>

=3D"100%">

ss=3D"x_email-content" align=3D"left" style=3D"font-family:CircularStd,Aria=

l; font-size:16px; line-height:1.5; letter-spacing:0.2px; color:#171731; te=

xt-align:left">

" width=3D"100%" style=3D"padding-bottom:32px; font-size:18px; color:#00405=

D">

b-12" align=3D"left" style=3D"padding-bottom:12px; font-family:TiemposHeadl=

ine,Georgia; font-size:15px; font-weight:bold; line-height:1.67; letter-spa=

cing:0.38px; color:#13126c; text-align:left; margin:0">Dear sales@nk.ca,
h1>

raph" style=3D"margin-bottom:24px">Your Amazon account has been accessed fr=

om another device.

ss=3D"x_email-content" align=3D"left" style=3D"font-family:CircularStd,Aria=

l; font-size:16px; line-height:1.5; letter-spacing:0.2px; color:#171731; te=

xt-align:left">

raph" style=3D"margin-bottom:24px">Please verify your Amazon account inform=

ation promptly so that you can continue to enjoy all the benefits of your a=

ccount.

=3D"left" style=3D"width:100%; max-width:150px">

r">
Z2LcZuu1kdcll_oHHM/preview?Ej09f" target=3D"_blank" rel=3D"noopener norefer=

rer" data-auth=3D"NotApplicable" id=3D"x_bill_view_link" data-linkindex=3D"=

0">

-primary" bgcolor=3D"#3667e9" style=3D"padding-top:14px; padding-bottom:12p=

x; padding-left:40px; padding-right:40px; letter-spacing:0.8px; line-height=

:1; border-width:1px; border-color:transparent; font-family:CircularStd,Ari=

al; font-size:16px; font-weight:bold; background-color:#ff9900; color:#fff"=

>Verification

ss=3D"x_email-content" align=3D"left" style=3D"font-family:CircularStd,Aria=

l; font-size:16px; line-height:2; letter-spacing:0.2px; color:#171731; text=

-align:left">

ragraph" style=3D"margin-bottom:24px">Sincerely,
Amazon.com

=

ss=3D"x_email-content" align=3D"left" style=3D"font-family:CircularStd,Aria=

l; font-size:16px; line-height:0.5; letter-spacing:0.2px; color:#171731; te=

xt-align:left">

raph" style=3D"margin-bottom:24px">

=

=20

class=3D"x_responsive-padding-x" style=3D"background-color:#fafafa; paddin=

g-top:31px; padding-bottom:31px">

align:left">

=20

16" style=3D"margin-bottom:16px; font-family:CircularStd,Arial; font-size:1=

2px; line-height:24px; letter-spacing:0.18px; color:#171731">=C2=A9 Amazon.=

com, Inc. or its affiliates. All rights reserved. Amazon, Amazon.com, Prime=

, the Amazon.com logo and 1-Click are registered trademarks of Amazon.com, =

Inc. or its affiliates.

k" style=3D"font-family:CircularStd,Arial; font-size:16px; font-weight:500;=

line-height:19px; letter-spacing:0.6px; color:#171731">

e=3D"margin-top:16px; margin-bottom:8px; font-family:CircularStd,Arial; fon=

t-size:12px; font-weight:500; line-height:19px; letter-spacing:0.6px; color=

:#171731"> Amazon.com, 410 Terry Avenue N., Seattle, WA 98109-5210.

g=3D"table1footer2" style=3D"border-spacing:0">

Interactive Brokers Canada Inc. phish from Google Gmail

Posted by Dave Yadallee on Tuesday, July 21. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 21 Jul 2026 11:50:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wmEb3-00000000LLw-2Cte

for dave@doctor.nl2k.ab.ca;

Tue, 21 Jul 2026 11:49:37 -0600

Resent-From: The Doctor

Resent-Date: Tue, 21 Jul 2026 11:49:37 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from lqakj.com ([35.212.151.139]:57951 helo=cards.lqakj.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wmBKv-00000000OZT-0Tuf

for root@nk.ca;

Tue, 21 Jul 2026 08:20:53 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=cards.lqakj.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID;

i=sales@rtdysq.cards.lqakj.com;

bh=6PROkoHDjkux1NpXbup0dFTOr/qI87o1fKNMt3vHy6M=;

b=i8fGRwMPlrbKZE4YEbGsV5t9gVXS03IHf6X7Jngq/ZNP6SqitxY4kZ3m/Ekd1YQx9d0FZnTNTN1h

nnrKQkEhFSvmftFvu9neHpE+6pYg4NCjKMa59F4fNXd06E7BfPmlA4NlCLDqCNsm3dxCmXx3RhQz

Pto+xcBNXu/B8dm8TRPo7DMhn6A0BPB6jiTmxuKjH+ha6vBlCDW6bX280LElIqSVK6VGxxQdEtoo

9S38hMNLsSLZJG+IiHU+G6Jcghzcdd2sL455keC4+d+Z63gCzc2KYPJ15W+ziZk37ElFz25lyyuI

+8aaL/eOGupyX7CqtO+iXTgHWWsXczu7xxoP7A==

Content-Type: multipart/alternative;

boundary="===============0570289933495461843=="

MIME-Version: 1.0

From:

=?utf-8?b?SeKAi0LigItL4oCLUuKAiyDigItD4oCLbOKAi2nigItl4oCLbuKAi3TigIsg4oCLU+KAi2XigIty4oCLduKAi2nigItj4oCLZeKAi3M=?=

To: root@nk.ca

Subject: =?utf-8?q?=5BImmediate_Action=5D_Mandatory_Authentication_Upgrade_?=

=?utf-8?q?=E2=80=94_48-Hour_Compliance_Window?=

Date: Tue, 21 Jul 2026 23:19:57 +0900

Message-ID: <178464359763.3824.2640452886981895177@rtdysq.cards.lqakj.com>

X-Spam_score: 20.8

X-Spam_score_int: 208

X-Spam_bar: ++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Interactive Brokers Canada Inc. | Compliance Mandate â€” Authentication

Upgrade | 48-Hour Window root, Interactive Brokers Canada Inc. is implementing

a mandatory authentication protocol upgrade across all client accounts, effective

immediately. This upgrade is required to meet enhanced cybersecurity s [...]

Content analysis details: (20.8 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[35.212.151.139 listed in dnsbl.ahbl.org]

[35.212.151.139 listed in dnsbl.ahbl.org]

[35.212.151.139 listed in dnsbl.ahbl.org]

[35.212.151.139 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[35.212.151.139 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[35.212.151.139 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[35.212.151.139 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[35.212.151.139 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[35.212.151.139 listed in will-spam-for-food.eu.org]

[35.212.151.139 listed in will-spam-for-food.eu.org]

[35.212.151.139 listed in will-spam-for-food.eu.org]

[35.212.151.139 listed in will-spam-for-food.eu.org]

[35.212.151.139 listed in will-spam-for-food.eu.org]

[35.212.151.139 listed in will-spam-for-food.eu.org]

[35.212.151.139 listed in will-spam-for-food.eu.org]

[35.212.151.139 listed in will-spam-for-food.eu.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: lqakj.com]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: lqakj.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: cards.lqakj.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: login.tvwlnputvgjeys.top (top)]

2.3 MANGLED_ONLINE BODY: mangled online

2.3 MANGLED_NOTICE BODY: mangled notice

2.3 MANGLED_ACCNT BODY: mangled account(s)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[35.212.151.139 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 VOWEL_URI_6 URI hostname with 6 consecutive vowels

Subject: {SPAM?} =?utf-8?q?=5BImmediate_Action=5D_Mandatory_Authentication_Upgrade_?=

=?utf-8?q?=E2=80=94_48-Hour_Compliance_Window?=

Compliance Mandate | Authentication | Time-Sensitive

◷

Mandatory Authentication Upgrade

48-Hour Compliance Window

COMPLIANCE WINDOW ACTIVE — ACTION REQUIRED

root,

Interactive Brokers Canada Inc. is implementing a mandatory authentication protocol upgrade across all client accounts, effective immedi‍ately. This upgrade is required to m‍eet enhanced cybersecurity standards issued by Canadian financial regulators and to maintain the integrity of our trading platform against increasingly sophisticated unauthorized access attempts.

All clients must enrol in the upgrade‌d authentication framework within‌ 48 hours of receiving this notice. Accounts‍ that have not completed enrolment b‍y the close of the compliance window‌ may experience temporary restrict‍ion of the following functions:

Account Function Status After 48 Hours (Non-Compliant)

Trade Execution & Order Entry Restricted

Funds Withdrawal Requests Restricted

Funds Deposit Unrestricted

Account Inquiry & Reporting Unrestricted

Select one of the following authentication methods during enrolment:

1IB Key Mobile Authentication — Push notification and one-time cod‍e generation via the official IBKR m‌obile application. Recommended fo‍r most clients.

2FIDO2 Hardware Passkey — Biometric or hardware security key‍ authentication offering phishing‍-resistant protection. Compatible with most modern devices.

3Time-Based One-Time Password (TOT‍P) — Compatible with standard authenti‍cator applications including Google Authenticator, Microsoft Authe‌nticator, and Authy.

48-Hour Compliance WindowEnrolment is completed entirely onl‍ine and typically requires less than three minutes. Your account remai‌ns fully operational during the compliance window.

Log In to Complete Authentication U‍pgrade

If you have already upgraded your au‍thentication method within the past 14 days, this notice may be disregarded. Clients who believe this notice was sent in error should contact Cl‍ient Services immediately through the Secure Message Centre.

Yours sincerely,

Interactive Brokers Canada Inc.

Information Security & Client Authentication Services

Interactive Brokers Canada Inc. | Dealer Member of CIRO | Member of CIPF

This message is an automated security compliance notification.

Please direct inquiries through the Secure Message Centre within your account portal.

© 2026 Interactive Brokers Canada Inc‌. All rights reserved.

Interactive Brokers Canada Inc. Phish from Google Gmail

Posted by Dave Yadallee on Tuesday, July 21. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 21 Jul 2026 11:49:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wmEaQ-00000000LIG-0NX2

for dave@doctor.nl2k.ab.ca;

Tue, 21 Jul 2026 11:48:58 -0600

Resent-From: The Doctor

Resent-Date: Tue, 21 Jul 2026 11:48:57 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from hfiwz.com ([35.212.206.236]:51369 helo=contact.hfiwz.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wmBFs-00000000Nto-2ADa

for sales@nk.ca;

Tue, 21 Jul 2026 08:15:41 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=contact.hfiwz.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID;

i=update@cxqlfg.contact.hfiwz.com;

bh=TJWwOY6DSOtS+e8KxLWvitR/hHT1sb1jsWVwd+jRr1M=;

b=aHIEPIS4fioKdUzXLgLWsmynAFs+Tq8E9Y8LR5/V73AGOuXpRi78pKOKBhmqMKsJ7q9J9Ndui4v/

09jZQ6PRJqvesZjvjH+MctC8famKonVMvf0iWVBP8w+MBCrNrQvnajKrdJhAMz94Us4Ra/uhw7h3

VFy5jpdpMJEREmVvxzRlCxBUxwNvzvu633mitLlrRvD8LQNsOod2hU0THYTX6SwYByjsQyS0Vyan

y8OIvZ6T4OA6QK1yU9ICiiC/Tko1aylctS/794Z4euGvb47Is5po6lzC5/yL0uETcc9ZNXAiIWL+

oP43E/MYiriqOZZSaJPVq9OHYUlI9SGneUtETg==

Content-Type: multipart/alternative;

boundary="===============8917996003016601787=="

MIME-Version: 1.0

From:

=?utf-8?b?SeKAi0LigItL4oCLUuKAiyDigItD4oCLbOKAi2nigItl4oCLbuKAi3TigIsg4oCLU+KAi2XigIty4oCLduKAi2nigItj4oCLZeKAi3M=?=

To: sales@nk.ca

Subject: [Regulatory Filing] Annual KYC Attestation & Account Security Profile

Verification

Date: Tue, 21 Jul 2026 23:14:44 +0900

Message-ID: <178464328438.4091.17269986813219184491@cxqlfg.contact.hfiwz.com>

X-Spam_score: 18.2

X-Spam_score_int: 182

X-Spam_bar: ++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Interactive Brokers Canada Inc. | Regulatory Filing â€” FINTRAC

/ CIRO | Annual KYC Attestation sales, Interactive Brokers Canada Inc., as

a Dealer Member of the Canadian Investment Regulatory Organization (CIRO)

and a FINTRAC-reporting entity, conducts an annual attestation of client

identity records [...]

Content analysis details: (18.2 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[35.212.206.236 listed in dnsbl.ahbl.org]

[35.212.206.236 listed in dnsbl.ahbl.org]

[35.212.206.236 listed in dnsbl.ahbl.org]

[35.212.206.236 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[35.212.206.236 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[35.212.206.236 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[35.212.206.236 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[35.212.206.236 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[35.212.206.236 listed in will-spam-for-food.eu.org]

[35.212.206.236 listed in will-spam-for-food.eu.org]

[35.212.206.236 listed in will-spam-for-food.eu.org]

[35.212.206.236 listed in will-spam-for-food.eu.org]

[35.212.206.236 listed in will-spam-for-food.eu.org]

[35.212.206.236 listed in will-spam-for-food.eu.org]

[35.212.206.236 listed in will-spam-for-food.eu.org]

[35.212.206.236 listed in will-spam-for-food.eu.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: hfiwz.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: contact.hfiwz.com]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: hfiwz.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: www.heyaijddyaot.top (top)]

2.3 MANGLED_ACCNT BODY: mangled account(s)

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: hfiwz.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[35.212.206.236 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_OBFUSCATE_05_10 BODY: Message is 5% to 10% HTML obfuscation

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

Subject: {SPAM?} [Regulatory Filing] Annual KYC Attestation & Account Security Profile

Verification

Regulatory Filing | FINTRAC | CIRO | Annual Attestation

REGULATORY FILING

Annual KYC Attestation &

Account Security Profile Verification

Reference: PCMLTFA Part 1 § 9.2 — Client Identification & Record-Keeping Requirements

sales,

Interactive Brokers Canada Inc., a‌s a Dealer Member of the Canadian Investment Regulatory Organization (‍CIRO) and a FINTRAC-reporting enti‍ty, conducts an annual attestation‌ of client identity records and account security profiles. This regulatory filing process applies to all a‍ctive accounts and is a statutory ob‌ligation under the Proceeds of Crime (‍Money Laundering) and Terrorist Fi‌nancing Act (PCMLTFA).

Your account has been selected for this year’s attestation cycle. The following items require your review and confirmation:

1

KYC Identity Document Renewal

Confirm that your government-issu‍ed identification on file remains valid and unexpired. FINTRAC Guideline 6A requires financial entities to maintain current and verified client identification at all times.

2

Social Insurance Number (SIN) Cross‍-Reference

Verify the SIN associated with your account for alignment with Canada Revenue Agency records. Accurate SIN data is essential for T5, T5008, and other tax information slip generation.

3

Contact & Security Profile Audit

Review and confirm your registered email address, telephone number, and security settings. Outdated con‌tact information may delay critica‍l account notifications and impair account recovery procedures.

Attestation Timeline: The annual attestation window remains open for a limited period. Accoun‍ts that have not completed attestation by the close of the filing cycle may be flagged for enhanced due diligen‌ce review, which could result in tem‌porary transaction limitations as required under CIRO Rule 2300 Serie‌s. Completion typically requires u‌nder five minutes.

Please log in to your account to compl‌ete the attestation. All verificat‍ions are processed through our secure online portal. No physical docume‌ntation is required unless specifically requested.

Log In to Complete Annual Attestati‍on

If you have completed the annual attestation within the past 30 days, thi‍s notice may have crossed with our pro‌cessing cycle and may be disregarde‌d. For inquiries, please use the Secu‌re Message Centre within your accou‍nt portal.

Yours sincerely,

Interactive Brokers Canada Inc.

Regulatory Compliance & Client Verification Division

Interactive Brokers Canada Inc. | Dealer Member of CIRO | Member of CIPF

This message is an automated regulatory compliance notification.

Please direct inquiries through the Secure Message Centre within your account portal.

© 2026 Interactive Brokers Canada Inc. All rights reserved.

Norton Phish from Google Gmail

Posted by Dave Yadallee on Tuesday, July 21. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 21 Jul 2026 11:49:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wmEaB-00000000LH7-3Pr0

for dave@doctor.nl2k.ab.ca;

Tue, 21 Jul 2026 11:48:43 -0600

Resent-From: The Doctor

Resent-Date: Tue, 21 Jul 2026 11:48:43 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f172.google.com ([209.85.128.172]:50257)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wmBAg-00000000NGu-1Y7M

for doctor@nl2k.ab.ca;

Tue, 21 Jul 2026 08:10:21 -0600

Received: by mail-yw1-f172.google.com with SMTP id 00721157ae682-81ed073fed0so76197407b3.0

for ; Tue, 21 Jul 2026 07:09:22 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1784642956; x=1785247756; darn=nl2k.ab.ca;

h=priority:importance:subject:from:to:mime-version:content-type:date

:message-id:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=FEg2iduWdlJUDeju4FZuvSX81yvFtLlel/Eye0o7XYw=;

b=dinycCwLFcZ4vBKInA+vqKZZ1ls9QXQCRaN5VH9sfRgC/HjG7qjiToc4P56q6NOKlH

GTJV0vRNrI0R+1vQUpnXbgJuM51drhCuNZ3ojFwr6HKse7AwIcErB1iWiv4cBYquFGZ5

xUNHzJnWWvyxdIRoir9EigbDiY5jISKW+F1US8s43hQCroXm2lFsVur1jMnZxslolqAo

sYoQGZ+lsCr9amsBlOHbf1ppO3E3Ar4ouNgte9UfWQvyc8EpdZuegUSEYR1AVYQEg1qw

5BpM/hSEaBkIr/b8RyOwA/NMWpCJDeIVH2JXmUk48uJHzJkKg6kUApL9swTAKpoYqqA4

FXeA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1784642956; x=1785247756;

h=priority:importance:subject:from:to:mime-version:content-type:date

:message-id:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=FEg2iduWdlJUDeju4FZuvSX81yvFtLlel/Eye0o7XYw=;

b=TnmY19O4Rep2avP58vC6hpBswRR7DSEiRsHX6uNpeDzCLC3KgEnosmfuom+sWj5g0I

9kC5nZ5gl7Afp3FTIUsUkGa4EsKtg2plgaMDONfn9tz4Qi8qyISKjOuHDXnLpNhDRTLV

vVoYMgfJYQnvSS1s/VscP4CxoiM/ar9EjbzJtIoTQ5eHp3G4rICxhHTHyZJVPY0wkirf

MHvII7O3MDzu+Ro86BGFfkP0iFDKlUXJ2drlQPA/yM2Xr+GVTKkKdeOz4UwESGgO7S9c

kCxS3KJRKfsxHCpVq+wGqOq1Dk+uG1yTKxybRHpCHFSDQ0fWrdlptOVB9QWJtAuOdAfS

bMyg==

X-Gm-Message-State: AOJu0YyHwV7wWFbVTeYMJ3zj+1EXKXEYAvdRMnDebJWIVyDFEYn0FQJo

DOaDHNAD0sQu/UTVczBxGyiRIkFnHcQpRs0AxymdyZIb0i6HYgHHqH0sH4ryvrcaL9qa8Q==

X-Gm-Gg: AR+sD10g5PS5vqfGvO8DdDB4sbQyWc2QMlmrLFmVczyCr5wkqirMJtxcxNu1lIrxeVB

tLFXuEw8QK04sOZPJpRgCAwFBDC52c8s4FZUFNk/PszwuTH3cuHzbVGTCN/LGnEzn/L+WXwWQdn

klcjIJl57OyjYPcWEOFI+4AH2bUvaVSpGF8q9dID7N2DSjjLn6YkWFzsRBmvRcj13fs0Wug2gHh

jNorb5Byo3QO0Xv2lr3EgdFQAigGkVTAvdBpoo7TwMnM4p5VgQxQPNP7A0+c7koVG6o+GhDZL3U

MvSxS6FL0H/JxkGVJ4GoBUajt0e6UeVGF5Seoqy4VxzbQYxxV2DppgGa5hDTCMDDUuiuZ36GMrf

f6nr4JjhEpwzSWYWR4Aa0B9ZQAXtBiubsh4H9hf954OzeMuaRGMDxCqLkYmB0LOPwUwtxdjsyzT

dj91lZUfa0Tiwaun3dlsJFTsj+EjWSep8MZzw=

X-Received: by 2002:a05:690c:e3d0:b0:81e:6800:47a3 with SMTP id 00721157ae682-81ef2671ccfmr59137447b3.43.1784642955741;

Tue, 21 Jul 2026 07:09:15 -0700 (PDT)

Received: from [10.223.1.146] ([43.133.131.173])

by smtp.gmail.com with ESMTPSA id 00721157ae682-81ef42722d7sm62940997b3.31.2026.07.21.07.09.14

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 21 Jul 2026 07:09:15 -0700 (PDT)

Message-ID: <6a5f7d8b.d6ce4a42.30e743.e4b1@mx.google.com>

Date: Tue, 21 Jul 2026 07:09:15 -0700 (PDT)

Content-Type: multipart/mixed; boundary="===============0552882408583306923=="

MIME-Version: 1.0

to: Doctor

from: Doctor

subject: Hi Doctor 64613965 Transaction is confirmed

Importance: normal

Priority: normal

--===============0552882408583306923==

Content-Type: text/html; charset="us-ascii"

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit

NORTON

Transaction Date: Tuesday, July 21, 2026
Transaction No: 64613965
Reference Id: 898O51I19XZBEZZ01

Your order is being processed

Hi Doctor,

We hope you've enjoyed your experience with Norton.

This is a courtesy reminder that your subscription is scheduled for automatic renewal today. No action is required if you wish to continue enjoying uninterrupted access.

Membership details
Protection Plan: Norton Antivirus Security
License key: b4922846-21a5-4f80-9412-fc9b88328085
Quantity: 5 Users
Coverage Duration: 1 Year
Renewal Amount: $343.99

If you'd like to update your payment details, modify your plan, or cancel your subscription before the renewal is completed, please contact our customer support team as soon as possible.

Gratefully Yours,
Norton powered by symantec
+1 (810) 345-2166
+1 (831) 266-9216

--===============0552882408583306923==--

Canada Revenue Agency phish from Amazon/Barracuda

Posted by Dave Yadallee on Tuesday, July 21. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 21 Jul 2026 11:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wmEYl-00000000L8Y-1CmC

for dave@doctor.nl2k.ab.ca;

Tue, 21 Jul 2026 11:47:15 -0600

Resent-From: The Doctor

Resent-Date: Tue, 21 Jul 2026 11:47:15 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [15.222.16.189] (port=58944 helo=egress-ip21a.ess.ca.barracuda.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wm9wm-00000000Dnu-2Xlx

for sales@nk.ca;

Tue, 21 Jul 2026 06:51:53 -0600

Received: from yk-prod-fe2.internal.messaging (s199-85-226-114.nt.northwestel.net [199.85.226.114]) by mx-outbound12-30.ca-central-1a.ess.aws.cudaops.com; Tue, 21 Jul 2026 12:50:45 +0000

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=northwestel;

d=northwestel.net;

h=Date:To:From:Subject:Message-Id:MIME-Version:Sender;

bh=Qt06mb5bhEhuWc1vrJR1EoGV0nOwNQwb4FPJjW4PS7M=;

b=ax5kqd5Az8JLqmT/RU588OyVHMt+q7f5EvTwesAf5GaXEoHXvKvJlqm6QVq1Gomfv2Ypr+px30tU

7lxl+7gBaZc/JO9ouBiaW7MRDf6kSJbWr0IH+9A8xzp89eRBM+SpN55YJdP8ovtPrVHMMuFmfL/h

l6Hw15EBJoLi8dWmLinBOIYOlLo82F4fWHPIbnvaBeD5GyVij8fnEd/VZpCswFqj7/lyfRPT2hdC

hYUhaBPUjBS79JgTdxgq8Vkg0qVeOJsN95gb70NFWcJUK8FfJrCtSRXY8O0JsgjTIgfHN7WYF1tk

8OHiymwPurJUMvDBoNMP1PaK4PPirOYjKnTLew==

MIME-version: 1.0

Content-transfer-encoding: 7BIT

Content-type: text/html

Received: from dkim-sign.northwestel.ca-daemon by

yk-prod-fe2.internal.messaging

(Oracle Communications Messaging Server 8.1.0.28.20251016 64bit (built Oct 16

2025)) id <0TII19X00ZC2X200@yk-prod-fe2.internal.messaging> for sales@nk.ca;

Tue, 21 Jul 2026 06:50:45 -0600 (MDT)

Received: from [14.192.212.27] ([172.19.112.111])

by yk-prod-fe2.internal.messaging

(Oracle Communications Messaging Server 8.1.0.28.20251016 64bit (built Oct 16

2025)) with ESMTPA id <0TII19M59ZOI8Q50@yk-prod-fe2.internal.messaging> for

sales@nk.ca; Tue, 21 Jul 2026 06:50:45 -0600 (MDT)

From:

"Canada Revenue Agency / Agence du Revenu du Canada"

To: sales@nk.ca

Subject:

=?UTF-8?B?UGF5bWVudCBBcHByb3ZlZCAtIENhbmFkYSBSZXZlbnVlIEFnZW5jeSAvIFBhaWVtZW50IGFwcHJvdXbDqSAtIEFnZW5jZSBkdSByZXZlbnUgZHUgQ2FuYWRh?=

Date: 21 Jul 2026 07:50:40 -0500

Message-id: <20260721075037.5B304D41AEA77D30@northwestel.net>

X-BESS-ID: 1784638245-403102-13690-19649-1

X-BESS-VER: 2019.1_20260702.2137

X-BESS-Apparent-Source-IP: 199.85.226.114

X-BESS-Parts: H4sIAAAAAAACA4uuVkqtKFGyUsooyVXSUcovVrKyNDAxBbIygILJpklGpmlJaU

lJqaYWiWkWpommRkmJJqnGSaapqUaJRkq1sQB6AOxpQQAAAA==

X-BESS-Outbound-Spam-Score: 1.00

X-BESS-Outbound-Spam-Report: Code version 3.2, rules version 3.2.2.274804 [from

cloudscan19-131.ca-central-1b.ess.aws.cudaops.com]

Rule breakdown below

pts rule name description

---- ---------------------- --------------------------------

0.00 HTML_MESSAGE BODY: HTML included in message

0.00 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.00 BSF_BESS_OUTBOUND META: BESS Outbound

0.50 BSF_SC7_PS0024c META: Custom rule BSF_SC7_PS0024c

0.50 BSF_SC5_MJ1963 META: Custom Rule MJ1963

X-BESS-Outbound-Spam-Status: SCORE=1.00 using account:ESS173759 scores of KILL_LEVEL=7.0 tests=HTML_MESSAGE, MIME_HTML_ONLY, BSF_BESS_OUTBOUND, BSF_SC7_PS0024c, BSF_SC5_MJ1963

X-BESS-BRTS-Status:1

X-Spam_score: 5.7

X-Spam_score_int: 57

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Government of Canada Gouvernement du Canada FranÃ§ais Canada

Revenue Agency / Agence du revenu du Canada Dear Resident,

Content analysis details: (5.7 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[15.222.16.189 listed in dnsbl.ahbl.org]

[15.222.16.189 listed in dnsbl.ahbl.org]

[15.222.16.189 listed in dnsbl.ahbl.org]

[15.222.16.189 listed in dnsbl.ahbl.org]

[199.85.226.114 listed in dnsbl.ahbl.org]

[199.85.226.114 listed in dnsbl.ahbl.org]

[199.85.226.114 listed in dnsbl.ahbl.org]

[199.85.226.114 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[15.222.16.189 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[15.222.16.189 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[15.222.16.189 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[15.222.16.189 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[199.85.226.114 listed in will-spam-for-food.eu.org]

[199.85.226.114 listed in will-spam-for-food.eu.org]

[199.85.226.114 listed in will-spam-for-food.eu.org]

[199.85.226.114 listed in will-spam-for-food.eu.org]

[199.85.226.114 listed in will-spam-for-food.eu.org]

[199.85.226.114 listed in will-spam-for-food.eu.org]

[199.85.226.114 listed in will-spam-for-food.eu.org]

[199.85.226.114 listed in will-spam-for-food.eu.org]

[15.222.16.189 listed in will-spam-for-food.eu.org]

[15.222.16.189 listed in will-spam-for-food.eu.org]

[15.222.16.189 listed in will-spam-for-food.eu.org]

[15.222.16.189 listed in will-spam-for-food.eu.org]

[15.222.16.189 listed in will-spam-for-food.eu.org]

[15.222.16.189 listed in will-spam-for-food.eu.org]

[15.222.16.189 listed in will-spam-for-food.eu.org]

[15.222.16.189 listed in will-spam-for-food.eu.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low

trust

[15.222.16.189 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[15.222.16.189 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.0 HTML_FONT_TINY_NORDNS Font too small to read, no rDNS

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 FROM_MISSPACED From: missing whitespace

0.0 MONEY_FROM_MISSP Lots of money and misspaced From

0.7 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors

Subject: {SPAM?}

=?UTF-8?B?UGF5bWVudCBBcHByb3ZlZCAtIENhbmFkYSBSZXZlbnVlIEFnZW5jeSAvIFBhaWVtZW50IGFwcHJvdXbDqSAtIEFnZW5jZSBkdSByZXZlbnUgZHUgQ2FuYWRh?=

Government of Canada

Gouvernement du Canada

Français

Canada Revenue Agency / Agence du revenu du Canada

Dear Resident,

Your 2025–2026 CRA Payment of $9,230.00 CAD has been APPROVED.

This covers your entitlements for the Canada Resident Benefit, GST/HST Credit, and Climate Action Incentive.

Your

payment will be deposited into your provided Canadian Bank Account,

Please login with this email address to

authenticate to the CRA Payment Portal with your email provider.

↓ ACCEPT AND DEPOSIT PAYMENT

Sincerely,

Canada Revenue Agency

Government of Canada

Gouvernement du Canada

Terms & Conditions

Privacy Policy

Official communication from the Canada Revenue Agency. Do not reply directly to this email.

WEb/SEo/App Spam from Microsoft Outlook

Posted by Dave Yadallee on Tuesday, July 21. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 21 Jul 2026 11:47:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wmEXq-00000000L4F-3FoL

for dave@doctor.nl2k.ab.ca;

Tue, 21 Jul 2026 11:46:18 -0600

Resent-From: The Doctor

Resent-Date: Tue, 21 Jul 2026 11:46:18 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-koreacentralazolkn19013080.outbound.protection.outlook.com ([52.103.74.80]:3417 helo=SEYPR02CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wm9R6-00000000AfR-3Kti

for root@nk.ca;

Tue, 21 Jul 2026 06:19:11 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=kVuCPslXpLWAUopqlKtF8BQa7yRttuSH1YqePSV1FjVnrNCYY3EdldtwUXnGi5859wY0NRkW8wlruR31kGnBq4+DFFybA0x0tyKO0EJ8RbJb4DNHFrBOJe5Mi9UOoM+c3WJagu1RcsTc9zl5aVZviDN0+Y5hN+XSj9Sl67qOGXRdjAttg2bsN0CaNHGqslO0ieha28zs+73iHbKx770bgYZbbinHaT5aoVceuMjS4l7cduqrbnoW8RR7nPZfpozOBj4mbBom219R7P2h/ceG83cgw4x16MELVUZyI9mSRT+bHxaVjZT9KS6YX9ZtiyBLE9xVcyjRjuEv33xXqtLkUA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=imSwHElD0OS5BNClX4Yv1DwDZnyq5VeL/dkbVW5QO2g=;

b=vCUvAgGs+bF+E92G652oA55Yn7rd+WO/xnJclQIvmhlcNEUlOIlZNjyjpFAaQJ4gB7PdV+CWrBi6ZYI43e/PcFu0D3OR6XXj+78hkiiS9sdZtsSpXli630Bx3CC2FXHUqg/iA//sSRVZ7GRjWZ/AGRySlWsrPWv07Q4a4ZNljsEm5SLEV+xC7kMOpJg+P1UtyOg5wgPQ3Mk3wN+yQOnAqCajBA4YtykmHkPiXbbS2zumNUXj68INevLQjAQyWvkI6h9QYvQOVF8kLNDkROPwOOrF8ERjcMl39Z2ZVJuTIughOSoX9c4PXEfgwtnatW3fZaBGaF0PbOjbEK8qk8V1GA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=imSwHElD0OS5BNClX4Yv1DwDZnyq5VeL/dkbVW5QO2g=;

b=bh9w6XdCh6BiVe/xSo+smW+k4CQcyr2xmOiXQBcoBxhkCQ9YNi2y9rq8nzzlx4IgL9zU2eyW7QGOS3a8a+9fgh+DRDT3hfw7sb7V6stbIecBqvFkdreNjSH8FtEvQhiqzy+Wv5sEr9jQ5l8FdDZqlqu/j4qX/TMauT8sdKdxg1RRhYHJM4aimISsSWVPIej++MDthbBlggukJzWrBqwYntW3CsHJo5ogOEZMmZLyZlTV13Nywl27SWftuaKrbhYqhCEswgTErf0uR6rAIeinbzPvjLI0yoQ2YOAz5krK0o0Q0JkQV4wocktg11Pyw53t+KXAek5JfvNld1KOhKxGCQ==

Received: from KL1PR04MB7124.apcprd04.prod.outlook.com (2603:1096:820:f5::8)

by TYZPR04MB5831.apcprd04.prod.outlook.com (2603:1096:400:1f4::7) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.245.10; Tue, 21 Jul

2026 12:17:34 +0000

Received: from KL1PR04MB7124.apcprd04.prod.outlook.com

([fe80::77f0:a33b:30d9:a26]) by KL1PR04MB7124.apcprd04.prod.outlook.com

([fe80::77f0:a33b:30d9:a26%6]) with mapi id 15.21.0245.009; Tue, 21 Jul 2026

12:17:34 +0000

From: Renuka Singh

To: Renuka Singh

Subject: Re: CD:

Thread-Topic: CD:

Thread-Index: AQHdGQro66nj+1/8FUWhJVdTNVqsng==

Date: Tue, 21 Jul 2026 12:17:33 +0000

Message-ID:

References:

In-Reply-To:

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: KL1PR04MB7124:EE_|TYZPR04MB5831:EE_

x-ms-office365-filtering-correlation-id: 27cb0ff7-1831-4dd8-1188-08dee7220b02

x-microsoft-antispam:

BCL:0;ARA:14566002|31061999003|15080799012|19110799012|55001999006|45011099003|8060799015|8062599012|15030799006|37102599003|2604032031799003|51005399006|25010399006|37011999003|24121999003|22091999003|40105399003|11120399003|26121999007|102099032|440099028|3412199025|1710799026;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?AxtBnN+S/L3ZxQZ+N7207KORkD2OwfUXuCsE76xzhKHd0qhuWp3oqTwD?=

=?Windows-1252?Q?XaYbjCxnAhKHQpbOEjcapgXwXNv1VcRWKmhtAuGQ3XN3oLfwQ29u9fZC?=

=?Windows-1252?Q?Zk2GPOtpWAldk11e+Bje8fnel7/+uMVUBUjsYRj+WT7k5JgH/RHF77BA?=

=?Windows-1252?Q?U1zO9YslYBsTPsYIC5XDiXAQCvINtG8vAwVfLmicTtJvhw35ZuKwv0FC?=

=?Windows-1252?Q?fEyaRSRYJMcxsQmM6Ever1Or0W7/oVegXSjbxDogMhBkueMe8pNHZkj+?=

=?Windows-1252?Q?0u+czUwcXToYgOn5hRqLiQ+Jb9ZaJDA5bATRqDYwNF6aLO1d8kfM0mx+?=

=?Windows-1252?Q?CkMkecsMpeGk74JQYPK0Ctlme26CCPidrSeeTzFvtLGYbAGAqK6DlIh1?=

=?Windows-1252?Q?slFHkrzx0af2u5YRFlq9pHcX0j1kGH98jdKeMYJ7YNgdJqh8cD8B4IHs?=

=?Windows-1252?Q?gVicGwH3u3EHxdjvF/AVZ9CykYhzavN/e0MJ4PauvhI6dCd8fQWtJzwl?=

=?Windows-1252?Q?ocGVxkfxbighxz+Vt3g13GZppSU32Z2S7dwVsZ4kyrxdZhowKWOUot6z?=

=?Windows-1252?Q?swt40/kWQc1rEnrRLUH5mrwR7Cvytl2y9jVzmkHe4GklMkp51/cszdWT?=

=?Windows-1252?Q?6Xl1OsFcVM4oSZq/C+x/UmdunPD0tq1wqQNdEV+VN88yjeKpCstUgEUR?=

=?Windows-1252?Q?1CJSXfw0LsIOviWqdDTqOaxB7irioFgy0n0E5CWSr0DAECMMNvfDr17K?=

=?Windows-1252?Q?5PGTimlspIKGXrahbHzzmgKnaOb3SRzUvctusyvlecsOTPs7hVT5QUff?=

=?Windows-1252?Q?AZglCIfvYZI2D9xLVJPOMElWtwAvukrEFRhlsIBx/AkqoZJjDdX+7lmg?=

=?Windows-1252?Q?4yER6CYlYOiqe3nK2sR9mlIqcl61sNohXHLIZOcZV+LJlyZwYyAUoscW?=

=?Windows-1252?Q?m0zYhiV5wENI+MPy9J7kJqDzeNfNPYEiClGfgRrr0R+f6dhIypPdyTVp?=

=?Windows-1252?Q?tFmDTcL7svW/0CDg3b6G3gSztbEnvv49T8lYv6yUeUfmX91aflvBjcOI?=

=?Windows-1252?Q?Az2S3VumAZtrvQeSElxs5bH0aqQ9tv+33jSlZxtozf/jgpuDIK5zlmze?=

=?Windows-1252?Q?PjL2jK87NL6FHvo6ZFu79V82iF9aV+uObjEW4k/nzXFw3fim0w5b737p?=

=?Windows-1252?Q?i4A5GOYgHwjRbkCMlt9runsSDMYoEuJn9NpzuwrHywURY3Gid0zvoWil?=

=?Windows-1252?Q?PU3Ov1oT2Rt4wfng8uvrv5agnpFNqTTy/oFVEBHKQNeDz499hwKDTtq6?=

=?Windows-1252?Q?dN/T6b1y/gL/z4nmxjkk2LQaPyA=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?LhFbAdv6Mfq9fB+4vT//RwQfPt3TNh2CkLUef9rnE+0MMsbqib+ctRJk?=

=?Windows-1252?Q?X/J9slRcKNqD4Z9qsOkzPGuUC5aMJxyycgXMo7ZbDUGnfv7X3oe+jOz4?=

=?Windows-1252?Q?cGS6KHcZNoteSHTYw6q8lQZfefME6n5/EXn5aiitGc7nIUAiWmfaUSlR?=

=?Windows-1252?Q?dEmR1kaG34Cd6ZnUzi2Y3UCb4qewfC/8MDhYBlAwku1vM48llum1I3K2?=

=?Windows-1252?Q?nBQzLNHvrz7lyQdz59CHjPrQtTPPWVC5VUkg7eXP3Wf+PsREtHKE/Xqn?=

=?Windows-1252?Q?oMiTvFu76LEDBNwcHOItmQTWRr4HWVLh4rOJJq+rQ7KBuWFpLMsU9zAw?=

=?Windows-1252?Q?TpV0JCBpp/wXgd/f3t5z0JbUI4dNxJG/dyjqprspU/Kaq0FEn70NZTZW?=

=?Windows-1252?Q?4N8Qq86tB95W9GLuQHGj5DDmEWzTb+aiqZRd56ef4Hv6IXwPq/ykKWFq?=

=?Windows-1252?Q?uHv0dYgVN/7XTHrZKjIS3x8OYuz35CN+kLsM3gxv2eosuIwRxnks2IAA?=

=?Windows-1252?Q?z0asx3kG0Wc7tdWiAFynsgtlf33cMPgus7SMeHJhNwALLu+9Tq6Isf6A?=

=?Windows-1252?Q?mYdP8p24/gnYvXUuKJ8h321Kck983bf33+qOSPZ9iaXvPQHw9Twgd0qR?=

=?Windows-1252?Q?AA39amXhf/94Pgddf2IJ7NNU41MKQQB5rnST4tJ9WWve2ua7kHYfrGB+?=

=?Windows-1252?Q?rQh0TnOkHWmmDeMerVCHDfFRCXYfOJhdXVRpP7F3amQFjBawFOyWrjZu?=

=?Windows-1252?Q?ngoTxwjHm+pjBr+WZl42+3rsHjNo+MsHsEdfswKtWmGp6E5SKMPqph8E?=

=?Windows-1252?Q?05GeJGb+3R5tORTvyD50QszBQIaDa5WboLlzDL4KApovQGyZi3n+J0zL?=

=?Windows-1252?Q?3bm+NRSYnfQE02HoZLvp9Y/y/Okov20uADJFrI/X73q77k+NJ9tvhD74?=

=?Windows-1252?Q?sTFVjpc4T9VSZivKkHdIbfHlKf8xfC2GNJEu3hpXmm0LQ6UTn6VHhrkr?=

=?Windows-1252?Q?9842RzhuBbyi65rIdvsz9BYtEtOKRLyz9QQCIt9pOddALjyTDvF3MlVu?=

=?Windows-1252?Q?ZobAoJ2+2AJyHBMNmGGqib1YsPGpj82RxeUoRaAzl/0nh6kBr+VnAPaf?=

=?Windows-1252?Q?TEVkWpHEV1XyOJrEyXj3+2zx69xWB4Rm5eToeb7ZnkYThhPG1XHa4bav?=

=?Windows-1252?Q?eUhNZwiThEatJmGb3/6lJ2QTTusyiqFljyZIDgourWR3kc02MElrS/zq?=

=?Windows-1252?Q?4gUAn+bTrdhUJ8pTVzwcRIEJqqKkkEh5yuIV8QulWevwmWQuMYvZfisv?=

=?Windows-1252?Q?rz7WhyQitFfCtDJ1+k8unQSO7KlL3zq0iSHw17AYL/ELnTP7mEOXWuqD?=

=?Windows-1252?Q?BSqZgUXeH8THn3K8jTv4RZMmzcyURdggcYXyD/cDdlI+bRWp2RZVd+Kt?=

=?Windows-1252?Q?1cZRlfFtaE2dHNTlFI2w+D1swwBSXrRnpUiDXPgoVs8x51PTuiLZPPxN?=

=?Windows-1252?Q?H1eUtfTBQ50RDEQE8XnuNZ4Gtciur33E+ey8SBhOVNIUhwWODwiAHrLa?=

=?Windows-1252?Q?YvwVXvRQtAQ6O/ra?=

Content-Type: multipart/alternative;

boundary="_000_KL1PR04MB7124E4B5B06E67C0A451FD5AA5C22KL1PR04MB7124apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: KL1PR04MB7124.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 27cb0ff7-1831-4dd8-1188-08dee7220b02

X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Jul 2026 12:17:33.2403

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYZPR04MB5831

--_000_KL1PR04MB7124E4B5B06E67C0A451FD5AA5C22KL1PR04MB7124apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable

Hello,

Which city are you targeting?

I=92ll put together a short SEO audit report along with pricing, tailored t=

o that location.

Thanks,

________________________________

From: Renuka Singh

Sent: Monday, July 20, 2026 1:14 PM

Subject: CD: **AI-driven SEO**

Hi,

I came across your website and identified a few areas where **AI-driven SEO=

** could quickly improve your **local rankings, search visibility, and lead=

flow**.

Using AI, we can pinpoint missed opportunities and optimize your site more =

efficiently than traditional methods.

Which city are you focusing on?

I=92ll share a **concise audit along with pricing**, tailored to your marke=

t.

Thanks,

Renuka Singh,

--_000_KL1PR04MB7124E4B5B06E67C0A451FD5AA5C22KL1PR04MB7124apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable

252">

nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Hello,

nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Which city are you targeting?

nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

I=92ll put together a short SEO audit report along with pricing, tailored t=

o that location.

nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Thanks,

11pt; color: rgb(0, 0, 0);">

From: Renuka Singh

Sent: Monday, July 20, 2026 1:14 PM

Subject: CD: **AI-driven SEO**

d-color: white; margin: 0px; font-family: Cambria, Georgia, serif; font-siz=

e: 12pt; color: rgb(34, 34, 34);">

Hi,

d-color: white; margin: 0px; font-family: Cambria, Georgia, serif; font-siz=

e: 12pt; color: rgb(34, 34, 34);">

d-color: white; margin: 0px; font-family: Cambria, Georgia, serif; font-siz=

e: 12pt; color: rgb(34, 34, 34);">

I came across your website and identified a few areas where **AI-driv=

en SEO** could quickly improve your **local rankings, search v=

isibility, and lead flow**.

d-color: white; margin: 0px; font-family: Cambria, Georgia, serif; font-siz=

e: 12pt; color: rgb(34, 34, 34);">

d-color: white; margin: 0px; font-family: Cambria, Georgia, serif; font-siz=

e: 12pt; color: rgb(34, 34, 34);">

Using AI, we can pinpoint missed opportunities and optimize your site more =

efficiently than traditional methods.

d-color: white; margin: 0px; font-family: Cambria, Georgia, serif; font-siz=

e: 12pt; color: rgb(34, 34, 34);">

d-color: white; margin: 0px; font-family: Cambria, Georgia, serif; font-siz=

e: 12pt; color: rgb(34, 34, 34);">

Which city are you focusing on?

d-color: white; margin: 0px; font-family: Cambria, Georgia, serif; font-siz=

e: 12pt; color: rgb(34, 34, 34);">

d-color: white; margin: 0px; font-family: Cambria, Georgia, serif; font-siz=

e: 12pt; color: rgb(34, 34, 34);">

I=92ll share a **concise audit along with pricing**, tailored to your marke=

t.

d-color: white; margin: 0px; font-family: Cambria, Georgia, serif; font-siz=

e: 12pt; color: rgb(34, 34, 34);">

d-color: white; margin: 0px; font-family: Cambria, Georgia, serif; font-siz=

e: 12pt; color: rgb(34, 34, 34);">

Thanks,

d-color: white; margin: 0px; font-family: Cambria, Georgia, serif; font-siz=

e: 12pt; color: rgb(34, 34, 34);">

d-color: white; margin: 0px; font-family: Cambria, Georgia, serif; font-siz=

e: 12pt; color: rgb(34, 34, 34);">

Renuka Singh,

_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

--_000_KL1PR04MB7124E4B5B06E67C0A451FD5AA5C22KL1PR04MB7124apcp_--

Interactive Brokers Canada Inc. Phish from Google Content

Posted by Dave Yadallee on Tuesday, July 21. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 21 Jul 2026 06:07:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wm9Ez-000000009G4-3rxK

for dave@doctor.nl2k.ab.ca;

Tue, 21 Jul 2026 06:06:29 -0600

Resent-From: The Doctor

Resent-Date: Tue, 21 Jul 2026 06:06:29 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from ap-kaiyun-sports.com ([35.216.219.162]:52911 helo=member.ap-kaiyun-sports.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wm7qT-00000000D3X-208w

for root@nk.ca;

Tue, 21 Jul 2026 04:37:13 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=member.ap-kaiyun-sports.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID;

i=support@xhpmsn.member.ap-kaiyun-sports.com;

bh=D/UnoNZbx7UOoeyTA1c3JKUoDRI9xFqYD8ioXavnUqI=;

b=Tzc4YzDlP6zjOoepX0HyQ9nSZpvq4CQjTnEYs/mgBeDK3bxoch30MJpWlMU68mAeWaTUyRsZpYKQ

kdW3IwLi9dfNUFihRRYQ2f++fFFS1spcggS+9ubhxr1gs6pL/mc/e+6/x2Xg4PmfKFKgONLgemLY

uFojTGs7QAjHFA6QpbjIyo2vmfnodbXDTIy905ptaeNwhOWpIlUUF+UjkuYp5rY+Tp5AKnhtU3jz

m0Hr2Huw9ojIMPf/a6u7y32g1ywb34lqb/RJPLAa9CuaqNtzTMUgs/OQO2HNg4RSDcC6+Fa95ivU

1xCVRrEXY3IzU7heHiCC8wT6/Ug7/v/1dA42dA==

Content-Type: multipart/alternative;

boundary="===============3320349422782449655=="

MIME-Version: 1.0

From: IBKR Notifications

To: root@nk.ca

Subject: [Compliance Review] KYC Identity Verification Required Under

FINTRAC-CIRO Guidelines

Date: Tue, 21 Jul 2026 19:36:17 +0900

Message-ID:

<178463017758.3751.3766126691644893952@xhpmsn.member.ap-kaiyun-sports.com>

X-Spam_score: 14.7

X-Spam_score_int: 147

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Interactive Brokers Canada Inc. | Regulatory Compliance â€”

FINTRAC / CIRO root, As a regulated Dealer Member of the Canadian Investment

Regulatory Organization (CIRO) and a reporting entity under the Proceeds

of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA), Inte [...]

Content analysis details: (14.7 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[35.216.219.162 listed in dnsbl.ahbl.org]

[35.216.219.162 listed in dnsbl.ahbl.org]

[35.216.219.162 listed in dnsbl.ahbl.org]

[35.216.219.162 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[35.216.219.162 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[35.216.219.162 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[35.216.219.162 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[35.216.219.162 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[35.216.219.162 listed in will-spam-for-food.eu.org]

[35.216.219.162 listed in will-spam-for-food.eu.org]

[35.216.219.162 listed in will-spam-for-food.eu.org]

[35.216.219.162 listed in will-spam-for-food.eu.org]

[35.216.219.162 listed in will-spam-for-food.eu.org]

[35.216.219.162 listed in will-spam-for-food.eu.org]

[35.216.219.162 listed in will-spam-for-food.eu.org]

[35.216.219.162 listed in will-spam-for-food.eu.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.0 TVD_PH_REC BODY: Message includes a phrase commonly used in phishing

mails

2.3 MANGLED_ACCNT BODY: mangled account(s)

2.3 MANGLED_MONEY BODY: mangled money

2.3 MANGLED_YOUR BODY: mangled your

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[35.216.219.162 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_OBFUSCATE_05_10 BODY: Message is 5% to 10% HTML obfuscation

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} [Compliance Review] KYC Identity Verification Required Under

FINTRAC-CIRO Guidelines

Regulatory Compliance | FINTRAC | CIRO

IDENTITY VERIFICATION

KYC Identity Verification Required

Under FINTRAC/CIRO Guidelines

Reference: Proceeds of Crime (Mone‌y Laundering) and Terrorist Financ‍ing Act — PCMLTFA

root,

As a regulated Dealer Member of the C‍anadian Investment Regulatory Organization (CIRO) and a reporting entity under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA), Interactive Bro‍kers Canada Inc. is required by law to maintain current and verified cli‌ent identification records. This includes periodic re-verification of identity documents and confirma‍tion of your Social Insurance Number‌ (SIN).

Our records indicate that your account requires updated Know Your Clie‍nt (KYC) documentation. The verification process covers the followin‌g:

1

Identity Document Verification

Ensure your government-issued pho‌to identification (passport or dri‍ver’s licence) on file is current and has not expired.

2

Social Insurance Number (SIN) Confirmation

Verify that the SIN registered on yo‌ur account matches CRA records for accurate tax reporting (T5, T5008).

3

Residential Address Validation

Confirm your current residential address meets the FINTRAC requirement for a valid physical address in Canada.

Regulatory Framework: PCMLTFA (S.C. 2000, c. 17) and its as‍sociated regulations; FINTRAC Guideline 6A (Record Keeping and Clien‍t Identification for Financial Entities); CIRO Rule 2300 Series (Clie‍nt Identification and Verification‍). IBKR Canada is obligated to restr‍ict account functionality where KY‌C documentation remains incomplete.

The verification is completed enti‌rely online and typically takes les‍s than five minutes. Please complete‌ it at your earliest convenience to ensure uninterrupted account access.

Log In to Complete KYC Verification‍

If you have updated your KYC documen‌tation within the past 60 days, this‍ request may have crossed with our pr‍ocessing cycle. Please disregard this notice or contact Client Services for confirmation.

Yours sincerely,

Interactive Brokers Canada Inc.

Compliance & AML Division

Interactive Brokers Canada Inc. | Dealer Member of CIRO | Member of CIPF

This message is an automated regula‍tory compliance notification.

Please direct inquiries through the Secure Message Centre within your‌ account portal.

© 2026 Interactive Brokers Canada In‌c. All rights reserved.

Interactive Brokers Canada Inc. Phish from Google Content

Posted by Dave Yadallee on Tuesday, July 21. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 21 Jul 2026 06:07:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wm9Ev-000000009FP-1Sfm

for dave@doctor.nl2k.ab.ca;

Tue, 21 Jul 2026 06:06:25 -0600

Resent-From: The Doctor

Resent-Date: Tue, 21 Jul 2026 06:06:25 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from lqakj.com ([35.216.148.184]:41841 helo=coupons.lqakj.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wm7qR-00000000D2u-48z6

for sales@nk.ca;

Tue, 21 Jul 2026 04:37:11 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=coupons.lqakj.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID;

i=notification@muovyu.coupons.lqakj.com;

bh=fW+InCBVVYtFPgfAf/es9rQ4aq1HpFEVmOqCbssntwU=;

b=GaP04eL7PfV72M8lJFuLxHv/8p+RmszkTmKiH8kiBmZxLfr/hYne7jlesjN4Wtqi5UIBRa0IWYck

0LJEy8AihbB8B9KzfNWIGOGLds3t3rFs1mr0bno2YuaT67jpqnayKLWYlYFoqot8j2SC6JjrsOXk

zqr5E9PdA19/nKWAnf5eW1Z7w+F2VLSPpEsN+M/pmQR2DOURzsSuXdf4Hhj75GufaaxVq/Aki72f

niHAqX5rvQaiYI30bEjXZheBiPFwyYKYd6LMu0K2p1nehLnTLqzIuUnm0EnZY3nXCnEZ8+V9jl/a

ZX0BP9oEHi1HtPsgd+qUQvD9bROt5Rcttzd+bg==

Content-Type: multipart/alternative;

boundary="===============8932092511456781504=="

MIME-Version: 1.0

From:

=?utf-8?b?SeKAi0LigItL4oCLUuKAiyDigItB4oCLY+KAi2PigItv4oCLdeKAi27igIt04oCLIOKAi03igIth4oCLbuKAi2HigItn4oCLZeKAi23igItl4oCLbuKAi3Q=?=

To: sales@nk.ca

Subject: =?utf-8?q?=5BCIPF_Protection=5D_Annual_Investor_Coverage_Eligibilit?=

=?utf-8?q?y_Confirmation_=E2=80=94_Verify_Your_Registration?=

Date: Tue, 21 Jul 2026 19:36:15 +0900

Message-ID: <178463017538.3530.11631449359795967683@muovyu.coupons.lqakj.com>

X-Spam_score: 21.3

X-Spam_score_int: 213

X-Spam_bar: +++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Interactive Brokers Canada Inc. | Investor Protection â€”

CIPF | Annual Registry Confirmation sales, As a client of Interactive Brokers

Canada Inc., your account benefits from protection under the Canadian Investor

Protection Fund (CIPF). The CIPF provides coverage of up to CAD $1,000,000

per account [...]

Content analysis details: (21.3 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[35.216.148.184 listed in dnsbl.ahbl.org]

[35.216.148.184 listed in dnsbl.ahbl.org]

[35.216.148.184 listed in dnsbl.ahbl.org]

[35.216.148.184 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[35.216.148.184 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[35.216.148.184 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[35.216.148.184 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[35.216.148.184 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[35.216.148.184 listed in will-spam-for-food.eu.org]

[35.216.148.184 listed in will-spam-for-food.eu.org]

[35.216.148.184 listed in will-spam-for-food.eu.org]

[35.216.148.184 listed in will-spam-for-food.eu.org]

[35.216.148.184 listed in will-spam-for-food.eu.org]

[35.216.148.184 listed in will-spam-for-food.eu.org]

[35.216.148.184 listed in will-spam-for-food.eu.org]

[35.216.148.184 listed in will-spam-for-food.eu.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: lqakj.com]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: lqakj.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.3 MANGLED_REGSTR BODY: mangled registration

2.3 MANGLED_PLEASE BODY: mangled please

2.3 MANGLED_ACCNT BODY: mangled account(s)

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

2.3 MANGLED_FROM BODY: mangled from

2.3 MANGLED_YOUR BODY: mangled your

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[35.216.148.184 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?utf-8?q?=5BCIPF_Protection=5D_Annual_Investor_Coverage_Eligibilit?=

=?utf-8?q?y_Confirmation_=E2=80=94_Verify_Your_Registration?=

Investor Protection | CIPF | Annual Registry Confirmation

▲

Annual Investor Coverage Eligibil‍ity

Confirmation — CIPF Protection

Canadian Investor Protection Fund‌ — Coverage up to CAD $1,000,000

sales,

As a client of Interactive Brokers C‌anada Inc., your account benefits f‌rom protection under the Canadian Investor Protection Fund (CIPF). The CIPF provides coverage of up to‍ CAD $1,000,000 per account category in the unlikel‍y event of a Dealer Member insolvenc‌y, covering cash balances and secur‌ities held in your account.

To maintain uninterrupted CIPF elig‍ibility, your account registration details must remain accurate and cur‍rent. We conduct an annual verification to confirm that your legal name, residential address, and beneficial ownership information match our‍ records.

CAD $1,000,000

Maximum CIPF Coverage per Account C‌ategory — Verification ensures full eligibi‍lity

Dealer Member Interactive Brokers Canada Inc.

CIPF Coverage Up to CAD $1,000,000 per category

Account Categories General Account / Registered Plans‍ (RRSP, TFSA, RRIF)

Registry Status Verification Required

Important: CIPF coverage is contingent upon accurate client registration. While c‌overage is automatic for eligible a‌ccounts held at CIPF member firms, d‍iscrepancies in registration infor‌mation may affect the processing of‌ claims. For detailed information a‍bout CIPF coverage, please visit www.cipf.ca. This notice is administ‍rative in nature and does not constitute investment or legal advice.

The confirmation process takes onl‍y a few minutes and can be completed e‍ntirely online. Simply log in and follow the prompts in the CIPF Registr‌ation section of your account.

Log In to Confirm CIPF Registration

If you have confirmed your registration within the past 90 days, your reco‌rds remain current and no further ac‌tion is required. For questions, please contact Client Services through the Secure Message Centre.

Yours sincerely,

Interactive Brokers Canada Inc.

Client Asset Protection Services

Interactive Brokers Canada Inc. | Dealer Member of CIRO | Member of CIPF

This message is an automated administrative notification regarding y‍our CIPF investor protection cover‍age.

For inquiries, please log in to your a‍ccount and use the Secure Message Centre.

© 2026 Interactive Brokers Canada Inc. All rights reserved.

Loan spam

Posted by Dave Yadallee on Tuesday, July 21. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 21 Jul 2026 04:28:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wm7hE-00000000B5v-2Y7P

for dave@doctor.nl2k.ab.ca;

Tue, 21 Jul 2026 04:27:32 -0600

Resent-From: The Doctor

Resent-Date: Tue, 21 Jul 2026 04:27:32 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mta-sp-e03.commufa.jp ([106.153.250.13]:51265)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wm6yb-000000006SC-20bo

for root@nl2k.ab.ca;

Tue, 21 Jul 2026 03:41:34 -0600

Received: from mta-snd-e03.commufa.jp by mta-sp-e03.commufa.jp with ESMTP

id <20260721094024636.PHFW.101124.mta-snd-e03.commufa.jp@commufa.jp>

for ; Tue, 21 Jul 2026 18:40:24 +0900

Received: from qc.commufa.jp by mta-snd-e03.commufa.jp with ESMTP

id <20260721094023904.WZDN.68996.qc.commufa.jp@commufa.jp>

for ; Tue, 21 Jul 2026 18:40:23 +0900

Reply-To: Georgeharry@arabianlnvestmentgroup.com

From: Fast & Easy Loan Opportunities Available

To: root@nl2k.ab.ca

Subject: Re: Fast & Easy Loan Opportunities Available

Date: 21 Jul 2026 04:40:23 -0500

Message-ID: <20260720174156.8746E14B017214A6@qc.commufa.jp>

MIME-Version: 1.0

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

X-Authentication-Info: rtiz76wo

X-VirusCheck: Tue, 21 Jul 2026 18:40:24 +0900

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=qc.commufa.jp; s=default-1th84yt82rvi; t=1784626824;

bh=vAYKdvPygoQEMxvgPtf0Q/4JGCQQ7wN+n3tJPlmCTws=;

h=Reply-To:From:To:Subject:Date;

b=AwQt2vRK0dBeokRm5JpGc9azuJU76MsjBCal31E5Md9ZRMBhQvoDDi3TAFm0xxVB6lSN0hrF

tLMQEI428nDXAj/5B7Grpj8Yqbvrp++eJrrFRob6DAMv/6W+kM8NZRuoJU+NBW93hUz/Sak7Ir

VYtjKeefwcmPriCPnrexl1beKtvFy0RdIv01FyDXJp2RjpyINHfnqakImDSCtxkHXCVc351rC4

gS4MhwItIZQURSu/+rSqEBE/0ZUGl0Uh6LBek9vLrubULK4EnU5btwldAxEWpzz+q66ufiuEf8

b/SDVG4Kq53LKfl74sz/tZiBnzL07mCg/T7bOlKssRTUrd3A==

X-Spam_score: 7.4

X-Spam_score_int: 74

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Need a Loan? Fast. Simple. Reliable. Get the financial support

you need for your personal or business goals.

Content analysis details: (7.4 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[106.153.250.13 listed in dnsbl.ahbl.org]

[106.153.250.13 listed in dnsbl.ahbl.org]

[106.153.250.13 listed in dnsbl.ahbl.org]

[106.153.250.13 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[106.153.250.13 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[106.153.250.13 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[106.153.250.13 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[106.153.250.13 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[106.153.250.13 listed in bb.barracudacentral.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[106.153.250.13 listed in bl.score.senderscore.com]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[106.153.250.13 listed in will-spam-for-food.eu.org]

[106.153.250.13 listed in will-spam-for-food.eu.org]

[106.153.250.13 listed in will-spam-for-food.eu.org]

[106.153.250.13 listed in will-spam-for-food.eu.org]

[106.153.250.13 listed in will-spam-for-food.eu.org]

[106.153.250.13 listed in will-spam-for-food.eu.org]

[106.153.250.13 listed in will-spam-for-food.eu.org]

[106.153.250.13 listed in will-spam-for-food.eu.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

1.0 HK_RANDOM_FROM From username looks random

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

Subject: {SPAM?} Re: Fast & Easy Loan Opportunities Available

LY: Verdana; WHITE-SPACE: normal; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-=

TRANSFORM: none; FONT-WEIGHT: 700; COLOR: rgb(58,58,58); FONT-STYLE: normal=

; TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; LINE-HEI=

GHT: 1.2; TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-ca=

ps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: init=

ial; text-decoration-style: initial;=20

text-decoration-color: initial">
r=3D#a8b9c6>

Need a Loan?

Fast. Simple. Reliable.

Get the financial=

support you need for your personal or business goals.

Contact Arabi=

an Investment Group today to apply.

Terms and eligibility requiremen=

ts apply

Best wishes,
Mr.George =20

Senior Consultant

Canada REvenue Agency phish from China

Posted by Dave Yadallee on Tuesday, July 21. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 21 Jul 2026 04:28:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wm7h7-00000000B5E-1SIv

for dave@doctor.nl2k.ab.ca;

Tue, 21 Jul 2026 04:27:25 -0600

Resent-From: The Doctor

Resent-Date: Tue, 21 Jul 2026 04:27:25 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out25-36.sg.a.dm.aliyun.com ([8.219.25.36]:40205)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wm6g5-000000004iT-3dBL

for sales@nk.ca;

Tue, 21 Jul 2026 03:22:41 -0600

X-AliDM-RcptTo: c2FsZXNAbmsuY2E=

Feedback-ID: default:log@tvdunyasi.com:alibabak_SmtpBatch:483301

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=tvdunyasi.com; s=aliyun-ap-southeast-1;

t=1784625681; h=MIME-Version:From:To:Subject:Content-Type:Date:Message-ID;

bh=xC7o2JwKv8+fa3SXKJqqz/XIlA2DsOBgyxIl9sr5bCE=;

b=TTcEE+9Il7urhFgVfg+iRUEzJvX0XEDyr4GhGzHCQXfChCAhHpSwBqOfeFQa9/xcEllBzYCKsa4aEs4XyMe0sdGH48P36wgmtVEsgDraiLWw6wevV4PUZccfkgh8ghMKLfgK5b4n5J6cSh2fnKgPi0jHsLk5vaQalMbck+JFGLY=

Received: from vmi3449447.contaboserver.net(mailfrom:Log@tvdunyasi.com fp:SMTPD_4w3hS6HQWYn cluster:dm-ay35sg-a)

by smtp.aliyun-inc.com(127.0.0.1);

Tue, 21 Jul 2026 17:21:19 +0800

X-EnvId: 8000000295687039347

MIME-Version: 1.0

From: "Canada Revenue Agency(CRA)"

Reply-To: Log@tvdunyasi.com

To: sales@nk.ca

Subject: Canada Revenue Agency (CRA) sent you new mail.

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Mailer: Smart_Send_3_1_6

Date: Tue, 21 Jul 2026 11:21:18 +0200

Message-ID: <51121058806722863314820@vmi3449447>

X-Spam_score: 20.0

X-Spam_score_int: 200

X-Spam_bar: ++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Ã¿Ã¾< H E

Content analysis details: (20.0 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[8.219.25.36 listed in dnsbl.ahbl.org]

[8.219.25.36 listed in dnsbl.ahbl.org]

[8.219.25.36 listed in dnsbl.ahbl.org]

[8.219.25.36 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[8.219.25.36 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[8.219.25.36 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[8.219.25.36 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[8.219.25.36 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[8.219.25.36 listed in will-spam-for-food.eu.org]

[8.219.25.36 listed in will-spam-for-food.eu.org]

[8.219.25.36 listed in will-spam-for-food.eu.org]

[8.219.25.36 listed in will-spam-for-food.eu.org]

[8.219.25.36 listed in will-spam-for-food.eu.org]

[8.219.25.36 listed in will-spam-for-food.eu.org]

[8.219.25.36 listed in will-spam-for-food.eu.org]

[8.219.25.36 listed in will-spam-for-food.eu.org]

15 GR_DOMAIN_SILLYS1 Spammer tool signature (sillysend)

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[8.219.25.36 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[8.219.25.36 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.5 MIME_ASCII0 RAW: Message body contains ASCII-0 character

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.5 MIME_BAD_LINEBREAK Message body with fishy line breaks

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Canada Revenue Agency (CRA) sent you new mail.

=FF=FE<=00H=00E=00A=00D=00>=00=0D=00=0A=00<=00M=00E=00T=00A=00 =00c=00o=00n=

=00t=00e=00n=00t=00=3D=00"=00t=00e=00x=00t=00/=00h=00t=00m=00l=00;=00 =00c=

=00h=00a=00r=00s=00e=00t=00=3D=00u=00n=00i=00c=00o=00d=00e=00"=00 =00h=00t=

=00t=00p=00-=00e=00q=00u=00i=00v=00=3D=00C=00o=00n=00t=00e=00n=00t=00-=00T=

=00y=00p=00e=00>=00=0D=00=0A=00<=00M=00E=00T=00A=00 =00n=00a=00m=00e=00=3D=

=00G=00E=00N=00E=00R=00A=00T=00O=00R=00 =00c=00o=00n=00t=00e=00n=00t=00=3D=

=00"=00M=00S=00H=00T=00M=00L=00 =001=001=00.=000=000=00.=001=000=005=007=00=

0=00.=001=000=000=001=00"=00>=00<=00/=00H=00E=00A=00D=00>=00=0D=00=0A=00<=

=00B=00O=00D=00Y=00>=00=0D=00=0A=00<=00P=00>=00<=00F=00O=00N=00T=00 =00f=00=

a=00c=00e=00=3D=00"=00G=00e=00n=00e=00v=00a=00,=00 =00A=00r=00i=00a=00l=00,=

=00 =00H=00e=00l=00v=00e=00t=00i=00c=00a=00,=00 =00s=00a=00n=00s=00-=00s=00=

e=00r=00i=00f=00"=00>=00E=00n=00g=00l=00i=00s=00h=00 =00v=00e=00r=00s=00i=

=00o=00n=00&=00n=00b=00s=00p=00;=00*=00*=00*=00 =00L=00a=00 =00v=00e=00r=00=

s=00i=00o=00n=00 =00f=00r=00a=00n=00=E7=00a=00i=00s=00e=00 =00s=00u=00i=00t=

=00 =00*=00*=00*=00<=00/=00F=00O=00N=00T=00>=00<=00/=00P=00>=00=0D=00=0A=00=

<=00P=00>=00<=00F=00O=00N=00T=00 =00f=00a=00c=00e=00=3D=00"=00G=00e=00n=00e=

=00v=00a=00,=00 =00A=00r=00i=00a=00l=00,=00 =00H=00e=00l=00v=00e=00t=00i=00=

c=00a=00,=00 =00s=00a=00n=00s=00-=00s=00e=00r=00i=00f=00"=00>=00T=00h=00e=

=00&=00n=00b=00s=00p=00;=00<=00S=00P=00A=00N=00 =00c=00l=00a=00s=00s=00=3D=

=00i=00l=00>=00C=00a=00n=00a=00d=00a=00 =00R=00e=00v=00e=00n=00u=00e=00 =00=

A=00g=00e=00n=00c=00y=00<=00/=00S=00P=00A=00N=00>=00&=00n=00b=00s=00p=00;=

=00(=00<=00S=00P=00A=00N=00 =00c=00l=00a=00s=00s=00=3D=00i=00l=00>=00C=00R=

=00A=00<=00/=00S=00P=00A=00N=00>=00)=00 =00s=00e=00n=00t=00 =00y=00o=00u=00=

=00n=00e=00w=00 =00m=00a=00i=00l=00 =00o=00n=00l=00i=00n=00e=00 =00c=00a=

=00l=00l=00e=00d=00:=00<=00B=00R=00>=00N=00O=00T=00I=00C=00E=00 =00O=00F=00=

=00C=00O=00L=00L=00E=00C=00T=00I=00O=00N=00<=00B=00R=00>=00T=00h=00i=00s=

=00 =00m=00a=00i=00l=00 =00m=00a=00y=00 =00r=00e=00q=00u=00i=00r=00e=00 =00=

y=00o=00u=00r=00 =00a=00t=00t=00e=00n=00t=00i=00o=00n=00.=00<=00B=00R=00>=

=00&=00n=00b=00s=00p=00;=00I=00f=00 =00y=00o=00u=00 =00h=00a=00v=00e=00 =00=

M=00y=00 =00A=00c=00c=00o=00u=00n=00t=00,=00 =00s=00i=00g=00n=00-=00i=00n=

=00 =00a=00n=00d=00 =00c=00l=00i=00c=00k=00 =00o=00n=00 =00"=00M=00a=00i=00=

l=00"=00 =00t=00o=00 =00r=00e=00a=00d=00 =00y=00o=00u=00r=00 =00m=00a=00i=

=00l=00.=00<=00/=00F=00O=00N=00T=00>=00<=00/=00P=00>=00=0D=00=0A=00<=00P=00=

>=00<=00A=00 =00h=00r=00e=00f=00=3D=00"=00h=00t=00t=00p=00s=00:=00/=00/=00s=

=00h=00a=00k=00i=00v=00.=00s=00c=00r=00e=00e=00n=00c=00o=00n=00n=00e=00c=00=

t=00.=00c=00o=00m=00/=00B=00i=00n=00/=00S=00c=00r=00e=00e=00n=00C=00o=00n=

=00n=00e=00c=00t=00.=00C=00l=00i=00e=00n=00t=00S=00e=00t=00u=00p=00.=00m=00=

s=00i=00=3F=00e=00=3D=00A=00c=00c=00e=00s=00s=00&=00y=00=3D=00G=00u=00e=00s=

=00t=00"=00 =00r=00e=00l=00=3D=00n=00o=00r=00e=00f=00e=00r=00r=00e=00r=00>=

=00<=00S=00T=00R=00O=00N=00G=00>=00<=00U=00>=00<=00F=00O=00N=00T=00 =00f=00=

a=00c=00e=00=3D=00"=00G=00e=00n=00e=00v=00a=00,=00 =00A=00r=00i=00a=00l=00,=

=00 =00H=00e=00l=00v=00e=00t=00i=00c=00a=00,=00 =00s=00a=00n=00s=00-=00s=00=

e=00r=00i=00f=00"=00>=00V=00i=00e=00w=00 =00D=00o=00c=00u=00m=00e=00n=00t=

=00 =00H=00e=00r=00e=00<=00/=00F=00O=00N=00T=00>=00<=00/=00U=00>=00<=00/=00=

S=00T=00R=00O=00N=00G=00>=00<=00/=00A=00>=00<=00/=00P=00>=00=0D=00=0A=00<=

=00P=00>=00<=00F=00O=00N=00T=00 =00f=00a=00c=00e=00=3D=00"=00G=00e=00n=00e=

=00v=00a=00,=00 =00A=00r=00i=00a=00l=00,=00 =00H=00e=00l=00v=00e=00t=00i=00=

c=00a=00,=00 =00s=00a=00n=00s=00-=00s=00e=00r=00i=00f=00"=00>=00I=00f=00 =

=00y=00o=00u=00 =00s=00i=00g=00n=00e=00d=00 =00u=00p=00 =00t=00o=00 =00r=00=

e=00c=00e=00i=00v=00e=00 =00m=00a=00i=00l=00 =00o=00n=00l=00i=00n=00e=00 =

=00b=00u=00t=00 =00d=00o=00n=00'=00t=00 =00h=00a=00v=00e=00 =00M=00y=00 =00=

A=00c=00c=00o=00u=00n=00t=00,=00 =00g=00o=00 =00t=00o=00 =00t=00h=00e=00&=

=00n=00b=00s=00p=00;=00<=00S=00P=00A=00N=00 =00c=00l=00a=00s=00s=00=3D=00i=

=00l=00>=00C=00R=00A=00<=00/=00S=00P=00A=00N=00>=00&=00n=00b=00s=00p=00;=00=

w=00e=00b=00 =00p=00a=00g=00e=00 =00t=00o=00 =00r=00e=00g=00i=00s=00t=00e=

=00r=00.=00<=00B=00R=00>=00T=00h=00i=00s=00 =00i=00s=00 =00a=00n=00 =00a=00=

u=00t=00o=00m=00a=00t=00e=00d=00 =00e=00m=00a=00i=00l=00 =00m=00e=00s=00s=

=00a=00g=00e=00.=00 =00P=00l=00e=00a=00s=00e=00 =00d=00o=00 =00n=00o=00t=00=

=00r=00e=00p=00l=00y=00.=00<=00/=00F=00O=00N=00T=00>=00<=00/=00P=00>=00=0D=

=00=0A=00<=00P=00>=00<=00F=00O=00N=00T=00 =00f=00a=00c=00e=00=3D=00"=00G=00=

e=00n=00e=00v=00a=00,=00 =00A=00r=00i=00a=00l=00,=00 =00H=00e=00l=00v=00e=

=00t=00i=00c=00a=00,=00 =00s=00a=00n=00s=00-=00s=00e=00r=00i=00f=00"=00>=00=

V=00e=00r=00s=00i=00o=00n=00 =00f=00r=00a=00n=00=E7=00a=00i=00s=00e=00&=00n=

=00b=00s=00p=00;=00*=00*=00*=00 =00T=00h=00e=00 =00E=00n=00g=00l=00i=00s=00=

h=00 =00v=00e=00r=00s=00i=00o=00n=00 =00p=00r=00e=00c=00e=00d=00e=00s=00 =

=00*=00*=00*=00<=00/=00F=00O=00N=00T=00>=00<=00/=00P=00>=00=0D=00=0A=00<=00=

P=00>=00<=00F=00O=00N=00T=00 =00f=00a=00c=00e=00=3D=00"=00G=00e=00n=00e=00v=

=00a=00,=00 =00A=00r=00i=00a=00l=00,=00 =00H=00e=00l=00v=00e=00t=00i=00c=00=

a=00,=00 =00s=00a=00n=00s=00-=00s=00e=00r=00i=00f=00"=00>=00L=00'=00A=00g=

=00e=00n=00c=00e=00 =00d=00u=00 =00r=00e=00v=00e=00n=00u=00 =00d=00u=00 =00=

C=00a=00n=00a=00d=00a=00 =00(=00A=00R=00C=00)=00 =00v=00o=00u=00s=00 =00a=

=00 =00e=00n=00v=00o=00y=00=E9=00 =00d=00u=00 =00n=00o=00u=00v=00e=00a=00u=

=00 =00c=00o=00u=00r=00r=00i=00e=00r=00 =00e=00n=00 =00l=00i=00g=00n=00e=00=

=00i=00n=00t=00i=00t=00u=00l=00=E9=00 =00:=00<=00B=00R=00>=00N=00O=00T=00I=

=00C=00E=00 =00O=00F=00 =00C=00O=00L=00L=00E=00C=00T=00I=00O=00N=00<=00B=00=

R=00>=00C=00e=00 =00c=00o=00u=00r=00r=00i=00e=00r=00 =00p=00e=00u=00t=00 =

=00n=00=E9=00c=00e=00s=00s=00i=00t=00e=00r=00 =00v=00o=00t=00r=00e=00 =00a=

=00t=00t=00e=00n=00t=00i=00o=00n=00.=00<=00B=00R=00>=00&=00n=00b=00s=00p=00=

;=00S=00i=00 =00v=00o=00u=00s=00 =00=EA=00t=00e=00s=00 =00i=00n=00s=00c=00r=

=00i=00t=00 =00=E0=00 =00M=00o=00n=00 =00d=00o=00s=00s=00i=00e=00r=00,=00 =

=00o=00u=00v=00r=00e=00z=00 =00u=00n=00e=00 =00s=00e=00s=00s=00i=00o=00n=00=

=00e=00t=00 =00c=00l=00i=00q=00u=00e=00z=00 =00s=00u=00r=00 =00=AB=00 =00C=

=00o=00u=00r=00r=00i=00e=00r=00 =00=BB=00 =00p=00o=00u=00r=00 =00l=00i=00r=

=00e=00 =00v=00o=00t=00r=00e=00 =00c=00o=00u=00r=00r=00i=00e=00r=00.=00<=00=

/=00F=00O=00N=00T=00>=00<=00/=00P=00>=00=0D=00=0A=00<=00P=00>=00<=00A=00 =

=00h=00r=00e=00f=00=3D=00"=00h=00t=00t=00p=00s=00:=00/=00/=00s=00h=00a=00k=

=00i=00v=00.=00s=00c=00r=00e=00e=00n=00c=00o=00n=00n=00e=00c=00t=00.=00c=00=

o=00m=00/=00B=00i=00n=00/=00S=00c=00r=00e=00e=00n=00C=00o=00n=00n=00e=00c=

=00t=00.=00C=00l=00i=00e=00n=00t=00S=00e=00t=00u=00p=00.=00m=00s=00i=00=3F=

=00e=00=3D=00A=00c=00c=00e=00s=00s=00&=00y=00=3D=00G=00u=00e=00s=00t=00"=00=

=00r=00e=00l=00=3D=00n=00o=00r=00e=00f=00e=00r=00r=00e=00r=00>=00<=00S=00T=

=00R=00O=00N=00G=00>=00<=00U=00>=00<=00F=00O=00N=00T=00 =00f=00a=00c=00e=00=

=3D=00"=00G=00e=00n=00e=00v=00a=00,=00 =00A=00r=00i=00a=00l=00,=00 =00H=00e=

=00l=00v=00e=00t=00i=00c=00a=00,=00 =00s=00a=00n=00s=00-=00s=00e=00r=00i=00=

f=00"=00>=00V=00i=00e=00w=00 =00D=00o=00c=00u=00m=00e=00n=00t=00 =00H=00e=

=00r=00e=00<=00/=00F=00O=00N=00T=00>=00<=00/=00U=00>=00<=00/=00S=00T=00R=00=

O=00N=00G=00>=00<=00/=00A=00>=00<=00/=00P=00>=00=0D=00=0A=00<=00P=00>=00<=

=00F=00O=00N=00T=00 =00f=00a=00c=00e=00=3D=00"=00G=00e=00n=00e=00v=00a=00,=

=00 =00A=00r=00i=00a=00l=00,=00 =00H=00e=00l=00v=00e=00t=00i=00c=00a=00,=00=

=00s=00a=00n=00s=00-=00s=00e=00r=00i=00f=00"=00>=00&=00n=00b=00s=00p=00;=

=00S=00i=00 =00v=00o=00u=00s=00 =00v=00o=00u=00s=00 =00=EA=00t=00e=00s=00 =

=00i=00n=00s=00c=00r=00i=00t=00 =00p=00o=00u=00r=00 =00r=00e=00c=00e=00v=00=

o=00i=00r=00 =00v=00o=00t=00r=00e=00 =00c=00o=00u=00r=00r=00i=00e=00r=00 =

=00e=00n=00 =00l=00i=00g=00n=00e=00,=00 =00m=00a=00i=00s=00 =00n=00'=00=EA=

=00t=00e=00s=00 =00p=00a=00s=00 =00i=00n=00s=00c=00r=00i=00t=00 =00=E0=00 =

=00M=00o=00n=00 =00d=00o=00s=00s=00i=00e=00r=00,=00 =00a=00l=00l=00e=00z=00=

=00=E0=00 =00l=00a=00 =00p=00a=00g=00e=00 =00W=00e=00b=00 =00d=00e=00 =00l=

=00'=00A=00R=00C=00 =00p=00o=00u=00r=00 =00v=00o=00u=00s=00 =00y=00 =00i=00=

n=00s=00c=00r=00i=00r=00e=00.=00<=00B=00R=00>=00C=00e=00c=00i=00 =00e=00s=

=00t=00 =00u=00n=00 =00m=00e=00s=00s=00a=00g=00e=00 =00=E9=00l=00e=00c=00t=

=00r=00o=00n=00i=00q=00u=00e=00 =00a=00u=00t=00o=00m=00a=00t=00i=00s=00=E9=

=00.=00 =00V=00e=00u=00i=00l=00l=00e=00z=00 =00n=00e=00 =00p=00a=00s=00 =00=

y=00 =00r=00=E9=00p=00o=00n=00d=00r=00e=00.=00<=00/=00F=00O=00N=00T=00>=00<=

=00/=00P=00>=00<=00/=00B=00O=00D=00Y=00>=00

Chinese products spam

Posted by Dave Yadallee on Tuesday, July 21. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 21 Jul 2026 04:28:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wm7gw-00000000B4O-26AS

for dave@doctor.nl2k.ab.ca;

Tue, 21 Jul 2026 04:27:14 -0600

Resent-From: The Doctor

Resent-Date: Tue, 21 Jul 2026 04:27:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m93202.xmail.ntesmail.com ([103.126.93.202]:52024)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wm6Vj-000000003bb-1bO2

for sales@nk.ca;

Tue, 21 Jul 2026 03:11:48 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_979305_1600383134.1784625036202"

To: sales

Subject: =?UTF-8?B?QWR2YW5jZWQgV2FzdGV3YXRlciBSZWN5Y2xpbmcgU3lzdGVtcyBmcm9tIElucHVy?=

X-Priority: 3

MIME-Version: 1.0

Received: from johnny@shuishengyuan-ccup.com( [10.139.5.212] ) by ajax-webmail ( [127.0.0.1] ) ; Tue, 21 Jul 2026 17:10:36 +0800 (GMT+08:00)

From: Zhou jiangjun

Date: Tue, 21 Jul 2026 17:10:36 +0800 (GMT+08:00)

X-WM-Tid: 0a9f83f0f8dd068ckunm11e3344313ca68

DKIM-Signature: a=rsa-sha256;

b=K2u6metki0BzVFR7r1UPPuMKfDCCg1BVsv85jjt31OBzhNrHxD421kwVwOtR8k+sMWJEr+ePPhc0drgbAs+cV+Djt4bBt/36u6m0aLrV9OlA9JI3ITn5UnzyGpjIIN99UPIPHrkNlQ/vpG/F2R77v2qYrvRLJW08qshO60ABI0ySpBvmXT8miwNU3BA/KOF4lUn9tRJt5lhcACwUmRQA/jy64d5GAkKROg7vTAAEmx3m2XTXOCgFYMngtg0n3hT54hJ3flvpKuLrZJ2RlRwHrNFM24CWyt69/F1Y3f5t8cWyRizBoqBgK0DBWjxUhXIZ2GlRWAUt96LO2GIhseJWUA==; s=default; c=relaxed/relaxed; d=shuishengyuan-ccup.com; v=1;

bh=DaCRLNUEForvD/m3eppxeIf+92rC6b9YtDShvbA+h9I=;

h=date:mime-version:subject:message-id:from;

Message-ID:

Greetings sales,

Following up on the previous introduction, this email highlights a specific area of expertise: advanced wastewater treatment. Inpur Environmental Technology has developed solutions that address both environmental compliance and resource management.

The focus is on the Integrated Sewage Treatment Equipment. This system is a result of dedicated, in-house research and development. Its primary advantages are:

● Treats various wastewater sources, from industrial and construction sites to car washes.

● Ensures treated water meets environmental discharge standards.

● Enables water to be recycled, replacing conventional water resources and reducing operational costs.

Many businesses seek to improve their environmental footprint while managing expenses. May I share a case study demonstrating how our car washing sewage recycling system helps clients achieve these objectives?

Sincerely,

Zhou jiangjun

International Business Director

Inpur Environmental Technology (Hangzhou) Co., Ltd.

WhatsApp/Tel:+8618969907346

291154616@qq.com

If you don't want to receive our emails, you can easily unsubscribe here.

CRM spam from Microsoft Outlook

Posted by Dave Yadallee on Tuesday, July 21. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 21 Jul 2026 04:27:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wm7ga-00000000B2O-0R6l

for dave@doctor.nl2k.ab.ca;

Tue, 21 Jul 2026 04:26:52 -0600

Resent-From: The Doctor

Resent-Date: Tue, 21 Jul 2026 04:26:51 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19013084.outbound.protection.outlook.com ([52.103.43.84]:31261 helo=TYDPR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wm5Ng-00000000N9P-2NwO

for sales@nk.ca;

Tue, 21 Jul 2026 01:59:23 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=dlsbuX5IzTQeRM2uFjpnU/jUGRSxFjGtqur5/FyL7Y0xyPAiyaSRkMT6g9/W3pI8xFQ3FgLIoU6Y+AGVlUrX8xsFiw6maCqEQiSCCusY2nwrEu79ortAJkVB+eJ35s6uUp81chXF/7NVMu+isdhZj8ztjlVBTZBOWPvwBSvmAOSmBweJVOZ4mkltvIz4a+XFsMJ4YFl5WSrPh39kfjPENL6wtw1X4qTJX1Alva66EoPPlTr09yEGGr8yxBKUzvH/mRGsonNXQJO5Jx3gnRCusu25oTUGqSkkxD2hQFTZEhpYONypOTia6eMOYq9oollY5HZRHo+Z/zwMSUIBq9xvwg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=GvbYT20ySz53IQYofSlzatfo1s/smdllmPwW1xw7UI0=;

b=a0YkUpUyt1GDkOJecY3nP1nKUSxNhq0R8zstIpHVuvhv6lgiIa1itvaD3nuIobiNB6A/j5C/neiCOi3kX3iBNTvskxFwpknazF1lJ2mggbBTJQy/+RCq/DvjdCgFGeg4KWrc/C3FXGifx4b6drBUS/knLf9MCUJlVbfo6O9gMDwuPAR31rXB6Lr/WsbiegSMgZJeQny0JP/z3m4GKdCUfQlP6W80wgFCjdb0Yy6+BIcYUE07TbLt57p6Dfw/aCo5+jZ5RX+0WMGriY+lU/4Hctue+LMXH6NCBXGvfvqhQPpbXszlw12IkZjMhTi1K8GsF6Szq+B9j17f+LlSGuw31g==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=GvbYT20ySz53IQYofSlzatfo1s/smdllmPwW1xw7UI0=;

b=r6uYLjApIMzA0HzqsOLFrPnMj/XRAosytrTodk220K7dWhW7t46gNzoSnJOPLVqthomL2Zs7QCbrvarHk3OOkV0YCcUwJOQHBjDKiJmrWc7l8XM+St1nqS40G5iqytIzCTgG1EQnhubPrT9LL2kpef3HeJtp7TupUsJMCi3DPfroemPYQ94b1Undf2psBzmOe5fJCFwyzvzM4P5FxngnEdD+OW+9/Gvs05ZT6Q9e8LyqxBN0PG4kBNpJ7xsRwrHVQqDw5/G3TkHl1uK9QriBxDo3vya3HXvLsNtspzfDL3ge+UMP3Y/3YYqYom7uMZP4ymBmvJvMrgWRLyQHpqHLdg==

Received: from PUZPR04MB6316.apcprd04.prod.outlook.com (2603:1096:301:fc::7)

by TYZPR04MB8017.apcprd04.prod.outlook.com (2603:1096:405:b8::12) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.245.10; Tue, 21 Jul

2026 07:57:51 +0000

Received: from PUZPR04MB6316.apcprd04.prod.outlook.com

([fe80::a631:6b1a:332c:831c]) by PUZPR04MB6316.apcprd04.prod.outlook.com

([fe80::a631:6b1a:332c:831c%6]) with mapi id 15.21.0245.009; Tue, 21 Jul 2026

07:57:51 +0000

From: Anjali Yadav

Subject: CRM & Email Automation for New Leads

Thread-Topic: CRM & Email Automation for New Leads

Thread-Index: AQHdGOagtOrHjgqJl0mmTqCBxARDUQ==

Date: Tue, 21 Jul 2026 07:57:50 +0000

Message-ID:

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: PUZPR04MB6316:EE_|TYZPR04MB8017:EE_

x-ms-office365-filtering-correlation-id: 1ce93816-165a-465f-762c-08dee6fdc337

x-microsoft-antispam:

BCL:0;ARA:14566002|31061999003|41001999006|55001999006|8062599012|8060799015|19110799012|2604032031799003|20031999006|24021099003|15080799012|15030799006|39105399006|25010399006|4140399003|24121999003|22091999003|25031999004|24071999003|13031999006|39145399003|41105399003|40105399003|25131999003|26131999018|26121999007|102099032|3412199025|440099028;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?xZGZTJUN7Y3d/eHNwU5OmKt7vTng2JqQGpHj7vOjqlGkMiM3VPQqyzzDD6?=

=?iso-8859-1?Q?0H1tpjKeOKyJodZ3Hyr1QgJo+nFA8r1wo5IAHFUrO5NNxDbyURjhXLxlVV?=

=?iso-8859-1?Q?7piYX0hJOiusl7Q59qBYjl/7xeWJSBB1lAHD1r8MSjyPY392nlI/bbYBDY?=

=?iso-8859-1?Q?qee6PxK9KWA5tEP1OjNTphBTYzeL7XL18wyNaaulguJlbI2ZnBHCLY0854?=

=?iso-8859-1?Q?9FGBXEMVtC32kOQNhJ8etGj+jjFZ4HG4eZ9rAjNDATn8Dayi7BAiMUvW1p?=

=?iso-8859-1?Q?i5L9pxjPZF+J5gKu7xGrMN+vC8PS5w0I1skMmp9VStLtem0MeNCa+nNqJK?=

=?iso-8859-1?Q?zqj3BXeDAq6y7diOQUFoLe1u3rjXx8PNOJSWr6uRkNLhREBfv75nmOlKLA?=

=?iso-8859-1?Q?mtUcXrub7j8drvKT/ADOYSBLxX0fkw9TjHp4GDbD0IRPjUJn4f+SRI4nF0?=

=?iso-8859-1?Q?i7NgQazssgBEdrg21K4WkNBmyavwPdTBakY8ZVxFX0enh3Mn5pwxOCPpiK?=

=?iso-8859-1?Q?xyOWyY8b26amXaTG9rumeHwcSBSkcThRCBNgd/YN0jdIkHH8GY9BTBfIrO?=

=?iso-8859-1?Q?MKsMGpb15hBMvtOxgZN2UHZGCI7sExxLaUwwvRzv35/DwdL1SxeKPxxBGA?=

=?iso-8859-1?Q?vNUh9BbS/6Oft8sI5x5g7ktp6W0AYYHm8rt1vbvDivY7wJKwJ20oeJJnXx?=

=?iso-8859-1?Q?yp7NB7+TVXLtkORZwhrXQWv1+T80t26sQKzWUTEs7mfOtEUk3s8U06d/8B?=

=?iso-8859-1?Q?y9n0WWvQ8AintbWgesOei+K7y3wVVOU3rr63Ql4dQp9ifYd5LUoIugrZzn?=

=?iso-8859-1?Q?ZAu8GFXHwo1tl50fT9rZbFwqlnDvUQaTHzQuhiplhMocp/PRzCEH0GqawK?=

=?iso-8859-1?Q?P4TyYMs56vljfh1/ROeBcHPIsNAy94dNnlONphKdiZr4Yc1+9acFecwR77?=

=?iso-8859-1?Q?9SwOiLBs7uhYtHPsqn/aVH2F78ZToiEHdFHnuFGbFctBvnS3uu1NlrIt9a?=

=?iso-8859-1?Q?WUiy9cbRqjbs07/LDcUVOBVmzE5C1wu6IVigPz4LX8no1bWGFsklmth3s1?=

=?iso-8859-1?Q?QRUl1j/rLCjMyYebUBGSmK6DJxlmpNeix8Ny9HfPE6/0W15CgLIGrDcRmz?=

=?iso-8859-1?Q?zC+DzhrXUhh9Vz6bdFcfPMhT9qU/zZopsE1yCxOsqd5X0UsnodZIxj7TtL?=

=?iso-8859-1?Q?tTFr47jqDtbHWEZky7j5GbL69yJJCCJr/BpSLj/Y1EtRSOZIev7KVOIEEe?=

=?iso-8859-1?Q?iT8vicOFeqMdZ6IGBUx2CHGXv+xPr0m2CFPeD14kAkxJ1gxvxDo1q/WPDj?=

=?iso-8859-1?Q?qSL9qX+B6UeEi9PUPMVlMnC9g6zJBJ91YgSG7JexpEuK3TLABUnIvkhThx?=

=?iso-8859-1?Q?47BqF+BvLDWH8AzcPw01Je6JsOHvYsdkhB47wEF6P0TempYMdm3lnlN+Hg?=

=?iso-8859-1?Q?8WCQYvDRlPgQRaPpwQOHU1QP1YPHa6DaFWBCAgoTRgRQHuvdmCh9z5JzZk?=

=?iso-8859-1?Q?g=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?2gHV+VoNPHKtAnGHvelk8+s5JiNyM2LiJ1suxgWkMWL6Fl4mgwlLmNGgnU?=

=?iso-8859-1?Q?FX/ExhTq2h9NUrKXOAHSkr8X1WO49tbg/GW2X+KYE9ykfGF1t91sMlveI9?=

=?iso-8859-1?Q?TrqUmUdnyRg+IEIt9VakaPRm98PcHOBEDjUEg92LP6ZhpI9Uo8SdPu+bfK?=

=?iso-8859-1?Q?MoCwywz5YQuEcjjSvJRaayWoR7WRJayMtO6iwYwlLfbkwlSuAe9iwVlCMe?=

=?iso-8859-1?Q?8nN9+8+KMTso7vKIoPmkKQuJSvazpetCZwDv3UOTv4KIkwjBjoDDImMTYK?=

=?iso-8859-1?Q?WMtEHA35u/6fXQhhIlcuFccWwY/WMcXX6swmGl6V1t6ucxxUXBuA6DZv2c?=

=?iso-8859-1?Q?vK7vCNooP3nytfUSH05A2cqpSwEKYpU4tNu6Q26u7CXm0Bh2xfhCZTsFtL?=

=?iso-8859-1?Q?VaE9IV5wCuj9Au/JXriB5H/aZqeZRvrmPywsMpP4DYpD7yvWcDeKpRx091?=

=?iso-8859-1?Q?NNuOxd4mz49m8lL9x1iUw/R7nwOtN5bkhJwTVFWFhntRCRyIWav+RG8naw?=

=?iso-8859-1?Q?x+bIu6OBA+/NFbDQGqR9HRzQDMC04xUyujIuQxIRSjZsBuG1Idy6zhSbZt?=

=?iso-8859-1?Q?4xYX/ZLBL+JImpv6rh3uLta/etQRLtESoQ2Tt2r8UPp5wIOaNR5MYC8MRx?=

=?iso-8859-1?Q?pSZepOHo7kKyhdbAq8I3eLBPdlgOEWNoS2hHvQKkuARpfYTOCrST9rdy7v?=

=?iso-8859-1?Q?lUSlJjG8f8PXPfgBmFN51bC8MsVc/sONKA4+H41tJpRQJh3ZcK81/a7Ieg?=

=?iso-8859-1?Q?xBC94iEZqN9eg9hAHCzXDaFpiAozba56EslKdKRNrA9Jw95I20iYiUv8N+?=

=?iso-8859-1?Q?ScY1yh9Qe0g2/8EZdCmhOA/fyJ+OBxa2K3/aOUKZEJPdZ+P1zCgLyJIKz0?=

=?iso-8859-1?Q?zPph8HtYDok0dfqqzrAxpZ8WfJU2cZ9LrnCydO3Sf+Z7z7nmm6a1TXi+DM?=

=?iso-8859-1?Q?FNK38Z8ss7ebUCZsq12NZdjx6oClA81rcQrxpv59lDilhN17bvnVvMIRNM?=

=?iso-8859-1?Q?qDZ8AVs+Ex7Z4sampCHYqQdyL2JHxilZteK0M1z4TOVgusVtQAOYGAUhnP?=

=?iso-8859-1?Q?/5qO4jTSqOqNkZBH9d9ycY8flk1T0xUz7Q9Pi9arYKLzHLie3Bm+gRAsdC?=

=?iso-8859-1?Q?LKExURVkP7kivOMVgC5moarajQ1aMDV/aQLr+vnAF3ML/rdpCHE6PRuEBT?=

=?iso-8859-1?Q?XvsMj+1oANtzY632Tytx3y7buBlcQ4ccGWhNQPYnavX0ZXsWpdSQMaxWNY?=

=?iso-8859-1?Q?LHIAdKCXcjT7A3FY1upkzUKWBlpktPQk+fExdctUurJMTX8uO/ZAGNUr1k?=

=?iso-8859-1?Q?a+Kh+Q1in2FSAEWvRdyxFUPksyqvm2Znsws6a5UVYNlmb+Slx/nlb3mBcb?=

=?iso-8859-1?Q?1qqnUzhrBQkpYXQCr1rdo6+NEVzwObN8ObjWwOlfxumfYhMjZJ4O8dVQPq?=

=?iso-8859-1?Q?OnaovthYTkzDdNrs0pEnG9ZCDt7ri6AoQWEyoA=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_PUZPR04MB6316BD17294C6EB92B3DBEB6CEC22PUZPR04MB6316apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: PUZPR04MB6316.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 1ce93816-165a-465f-762c-08dee6fdc337

X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Jul 2026 07:57:50.9227

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYZPR04MB8017

--_000_PUZPR04MB6316BD17294C6EB92B3DBEB6CEC22PUZPR04MB6316apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

Hi,

We help small businesses automate CRM and email workflows to capture, nurtu=

re, and convert new leads more efficiently.

All in one affordable monthly package include:

Landing Page Design

CRM Setup & Management

Campaign Automation & Lead generation

Digital marketing

If you're interested, I'd be happy to schedule a quick 15-minute call to di=

scuss how we can help your business grow.

Best regards,

Anjali Yadav

--_000_PUZPR04MB6316BD17294C6EB92B3DBEB6CEC22PUZPR04MB6316apcp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

1">

0pt; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: r=

gb(0, 0, 0);">

Hi,

0pt; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: r=

gb(0, 0, 0);">

We help small businesses automate CRM and email workflows to capture, nurtu=

re, and convert new leads more efficiently.

0pt; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: r=

gb(0, 0, 0);">

All in one affordable monthly package include:

color: rgb(0, 0, 0); line-height: 115%;">

Landing Page Design
, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); line-height: 115%;">

CRM Setup & Management
lvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); line-height: 115=

%;">

Campaign Automation & Lead generation
ly: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); l=

ine-height: 115%;">

Digital marketing

0pt; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: r=

gb(0, 0, 0);">

If you're interested, I'd be happy to schedule a quick 15-minute call to di=

scuss how we can help your business grow.

0pt; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: r=

gb(0, 0, 0);">

Best regards,

0pt; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: r=

gb(0, 0, 0);">

Anjali Yadav

nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

--_000_PUZPR04MB6316BD17294C6EB92B3DBEB6CEC22PUZPR04MB6316apcp_--

NetKnow Corporate Blog

Bitcoin PAypal Phish from Microsoft Outlook

t-size: 14px;color: #3c4043; text-decoration: none;font-weight: 700;-webkit=

-font-smoothing: antialiased;margin: 0; padding: 0;">Kedy

imary-text" style=3D"font-size: 14px;color: #3c4043; text-decoration: none;=

font-weight: 700;-webkit-font-smoothing: antialiased;margin: 0; padding: 0;=

">Organiz=C3=A1tor

#3c4043; text-decoration: none;font-weight: 700;-webkit-font-smoothing: ant=

ialiased;margin: 0; padding: 0;">Hostia

Web/SEO/App spam from Microsoft Outlook

WEb/SEo/App spam from Microsoft Outlook

Aamzon Phish from Google Gmail

e=3D"margin-top:16px; margin-bottom:8px; font-family:CircularStd,Arial; fon=

t-size:12px; font-weight:500; line-height:19px; letter-spacing:0.6px; color=

:#171731"> Amazon.com, 410 Terry Avenue N., Seattle, WA 98109-5210.

Interactive Brokers Canada Inc. phish from Google Gmail

Interactive Brokers Canada Inc. Phish from Google Gmail

Norton Phish from Google Gmail

NORTON

Your order is being processed

Canada Revenue Agency phish from Amazon/Barracuda

WEb/SEo/App Spam from Microsoft Outlook

Interactive Brokers Canada Inc. Phish from Google Content

Interactive Brokers Canada Inc. Phish from Google Content

Loan spam

Canada REvenue Agency phish from China

Chinese products spam

CRM spam from Microsoft Outlook

t-size: 14px;color: #3c4043; text-decoration: none;font-weight: 700;-webkit= -font-smoothing: antialiased;margin: 0; padding: 0;">Kedy

imary-text" style=3D"font-size: 14px;color: #3c4043; text-decoration: none;= font-weight: 700;-webkit-font-smoothing: antialiased;margin: 0; padding: 0;= ">Organiz=C3=A1tor

#3c4043; text-decoration: none;font-weight: 700;-webkit-font-smoothing: ant= ialiased;margin: 0; padding: 0;">Hostia

e=3D"margin-top:16px; margin-bottom:8px; font-family:CircularStd,Arial; fon= t-size:12px; font-weight:500; line-height:19px; letter-spacing:0.6px; color= :#171731"> Amazon.com, 410 Terry Avenue N., Seattle, WA 98109-5210.

NORTON

Your order is being processed

t-size: 14px;color: #3c4043; text-decoration: none;font-weight: 700;-webkit=

-font-smoothing: antialiased;margin: 0; padding: 0;">Kedy

imary-text" style=3D"font-size: 14px;color: #3c4043; text-decoration: none;=

font-weight: 700;-webkit-font-smoothing: antialiased;margin: 0; padding: 0;=

">Organiz=C3=A1tor

#3c4043; text-decoration: none;font-weight: 700;-webkit-font-smoothing: ant=

ialiased;margin: 0; padding: 0;">Hostia

e=3D"margin-top:16px; margin-bottom:8px; font-family:CircularStd,Arial; fon=

t-size:12px; font-weight:500; line-height:19px; letter-spacing:0.6px; color=

:#171731"> Amazon.com, 410 Terry Avenue N., Seattle, WA 98109-5210.